How to fix 'Safe Sender' Banner in Outlook

How to Whitelist Phishing Simulation Domains via PowerShell

This guide provides instructions on how to globally whitelist specific domains for phishing simulations by adding them to the Safe Senders list for all user mailboxes.

Prerequisites:

• You must have Exchange Administrator permissions.

• You will need Windows PowerShell (run as Administrator).

Step 1: Open PowerShell and Install the Required Module

If you have never managed Exchange Online from your computer before, you must first install the management module.

1. Click the Windows Start button, type PowerShell, right-click it, and select Run as Administrator.

2. Run the following command to install the Exchange Online module:

   Install-Module -Name ExchangeOnlineManagement -Force
   

   (Note: If prompted to trust the repository or install NuGet, type Y and press Enter).

Step 2: Connect to Exchange Online

1. Once the installation is complete, connect to your environment by running:

   Connect-ExchangeOnline
   

2. A Microsoft 365 login window will appear. Sign in with your Exchange Administrator credentials.

Step 3: Copy the Whitelisting Script

Highlight and copy (Ctrl + C) the entire block of code below.

$trustedDomains = @("ssuport.com", "supppot.com", "center-supports.com", "supoorts.com", "suporrt.com", "team-support.net", "supppot.net", "legal-user.com", "the-verification.com", "legals-team.com", "authenticatecenter.com", "ourlogin.co.uk", "mnminfo.com", "help-desc.com", "account-protector.com", "calendarsupdates.com", "appstatusupdate.com", "hr-updates.net", "itservicesector.com", "mailer-sender.com", "servicealerts.net", "status-pager.com", "nonreplies.com", "registerconfirmation.com")

$All = Get-Mailbox -RecipientTypeDetails UserMailbox -ResultSize Unlimited

$All | ForEach-Object {
  Set-MailboxJunkEmailConfiguration -Identity $_.PrimarySmtpAddress -TrustedSendersAndDomains @{Add=$trustedDomains}
}

Step 4: Paste and Execute

1. Return to your active PowerShell window.

2. Paste the copied script directly into the console (you can right-click inside the window or press Ctrl + V).

3. Press Enter to execute the script.

4. Allow the script time to process. For larger organizations, this may take a few minutes. The prompt will return to a blinking cursor on a new line once it has finished updating all mailboxes.

Step 5: Disconnect

Once the process is complete, securely close your Exchange Online session by running:

Disconnect-ExchangeOnline