Commands › Exchange Online

Release-QuarantineMessage

Exchange Online ExchangeOnlineManagement Release-*

Release messages from quarantine in your cloud-based organization. You can release messages to all original recipients, or to specific recipients. For files that were quarantined by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams, you can unblock the files in the respective team sites and document libraries by using the Release-QuarantineMessage cmdlet so users can access, share, and download the files.

Quick start script

# Release-QuarantineMessage — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Release-QuarantineMessage -Identities <QuarantineMessageIdentity[]> -ReleaseToAll <SwitchParameter> -User <String[]> | Format-List

# 3. Export for evidence / drift tracking
Release-QuarantineMessage | Export-Clixml .\QuarantineMessage-$(Get-Date -Format yyyyMMdd).xml

Syntax — 4 parameter sets

OrgReleaseToUser

Release-QuarantineMessage -User <String[]> [-Identities <QuarantineMessageIdentity[]>]
 [-Identity <QuarantineMessageIdentity>]
 [-AllowSender]
 [-Confirm]
 [-Force]
 [-ReportFalsePositive]
 [-WhatIf]
 [<CommonParameters>]

OrgReleaseToAll

Release-QuarantineMessage [-Identities <QuarantineMessageIdentity[]>] [-Identity <QuarantineMessageIdentity>]
 [-ReleaseToAll]
 [-AllowSender]
 [-Confirm]
 [-Force]
 [-ReportFalsePositive]
 [-WhatIf]
 [<CommonParameters>]

Identities

Release-QuarantineMessage -Identities <QuarantineMessageIdentity[]>
 [-Identity <QuarantineMessageIdentity>]
 [-ActionType <ReleaseActionType>]
 [-AllowSender]
 [-Confirm]
 [-Force]
 [-ReportFalsePositive]
 [-WhatIf]
 [<CommonParameters>]

IdentityOnly

Release-QuarantineMessage -Identity <QuarantineMessageIdentity>
 [-AllowSender]
 [-Confirm]
 [-Force]
 [-ReportFalsePositive]
 [-WhatIf]
 [<CommonParameters>]

Parameters (10)

Parameter	Type	Required	What it controls
-Identities	QuarantineMessageIdentity[]	yes	The Identities parameter identifies quarantined messages for bulk operations. You identify the messages by using the syntax: `value1,value2,...valueN`. The value is a unique quarantined message identifier in the...
-Identity	QuarantineMessageIdentity		The Identity parameter specifies the quarantined message that you want to release. The value is a unique quarantined message identifier in the format `GUID1\GUID2` (for example...
-ReleaseToAll	SwitchParameter	yes	The ReleaseToAll switch releases the quarantined message to all original recipients. You don't need to specify a value with this switch.
-User	String[]	yes	The User parameter specifies the email address of the user to whom you want to release the quarantined message. You can specify multiple email addresses separated by commas.
-ActionType	ReleaseActionType		The ActionType parameter specifies the release action type. Valid values are:
-AllowSender	SwitchParameter		The AllowSender switch specifies that all future messages from the sender isn't quarantined. You don't need to specify a value with this switch.
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-Force	SwitchParameter		The Force switch hides warning or confirmation messages. You don't need to specify a value with this switch.
-ReportFalsePositive	SwitchParameter		The ReportFalsePositive switch specifies whether to report the message as a false positive to Microsoft (good message marked as bad). You don't need to specify a value with this switch.
-WhatIf	SwitchParameter		The WhatIf switch doesn't work in Security & Compliance PowerShell.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.