Native external sender callouts on email in Outlook
Published Apr 02 2021 06:20 AM 289K Views

Overview

We know that some of our customers leverage Exchange transport rules to prepend subject line or insert the message body to show the email is from external senders. This approach has a few limitations which we heard:

  • You can end up with duplicate [External] tags in subject line if external users keep replying to the thread (some of our customers use customized solutions to remove the duplicates).
  • Adding things to subject line breaks Outlook conversation threading, as the subject line is modified, so messages no longer “belong” to the same conversation.
  • Changed subject (or message body) stays as a part of the message during reply or forward, which leads to confusion if the thread becomes internal.
  • There can be localization issues, as transport rules have no knowledge of client language that end-users are using.
  • Those additions might take a lot of space in the subject line, making it hard to preview the subject on smaller devices.

We have heard the feedback on this, and are working on providing a native experience to identify emails from senders outside your organizations (which can help protect against spam & phishing threats). This is achieved by presenting a new tag on emails called “External” (the string is localized based on your client language setting) and exposing related user interface at the top of your message reading view to see and verify the real sender's email address.

To set this up

  1. Exchange Online tenant admin will need to run the cmdlet Set-ExternalInOutlook to enable the new user interface for the whole tenant (this is available now); adding certain emails and domains to the allow list via the cmdlet is also possible.
  2. Outlook on the web already supports this. Outlook Mobile (iOS & Android) and Outlook for Mac are rolling out this feature. Specific versions:
    • Outlook on the web: available now
    • Outlook for Windows: Update 10/6/23: This feature is now available in Semi-Annual Enterprise Channel (Preview) too. External Tag view in Outlook for Windows (matching other clients) released to production for Current Channel and Monthly Enterprise Channel in Version 2211 for builds 15831.20190 and higher. We anticipate the External tag to reach Semi-Annual Preview Channel with Version 2308 on the September 12th 2023 public update and reach Semi-Annual Enterprise Channel with Version 2308 with the January 9th 2024 public update.  If any of the versions or dates change we will update this topic. See Update history for Microsoft 365 Apps (listed by date) to see release status of versions.
    • Outlook mobile (iOS & Android): version 4.2111.0 and higher
    • New Outlook for Mac: version 16.47 and higher

If you are using the prepend subject line transport rules currently to add an [EXTERNAL] tag in external email subject line: the new Outlook native callouts are adding a new MAPI property called IsExternalSender to the email item. Once all the (above listed) client versions you require have this functionality, to avoid emails being marked ‘External’ twice (once by new native functionality and once by the transport rule), please turn off the transport rule first before turning on Outlook native external sender callouts.

We tracked this feature in Microsoft 365 Roadmap ID 70595. This feature can be enabled on the tenant level now.

Outlook on the web, Mac, and mobile will display an External tag in the message list. Outlook Desktop and OWA will show the sender's email address at reading pane info bar. Outlook mobile and Outlook for Mac will only see an external tag on the message reading pane, and users will need to click the tag to see the real sender’s email address.

Outlook for Windows view of External sender (note that the experience is slightly different from others below):

ExternalCalloutsOutlook2.jpg

Update 11/3/2022: The newer External Tag view for Outlook for Windows (matching other clients) is currently rolling out:

OLupdatedexternal.png

Outlook on the web view of External sender:

NativeOLExternal01.jpg

In Outlook for iOS, External sender user interface in the message list, External tag when reading chosen email and view of sender's email address after tapping External label:

NativeOLExternal02.jpg

Once this feature is enabled via PowerShell, it might take 24-48 hours for your users to start seeing the External sender tag in email messages received from external sources (outside of your organization), providing their Outlook version supports it.

If enabling this, you might want to notify your users about the new feature and update your training and documentation, as appropriate.

Let us know here if you have any feedback!

The Outlook Team

157 Comments
Iron Contributor

@Nicola GuarinoI can confirm this is working in the Outlook desktop client for us, on the latest version of the Monthly Enterprise channel.

Copper Contributor

Hi,

Unfortunately this feature blocks the name of the sender due to space constraints. How do I disable this feature.

I was doing fine distinguishing external and internal senders.

Thanks

Konika

Copper Contributor

Has there been any updates on whether this will work for on-prem Exchange?

Steel Contributor

Hi @icuoras 

As far as i know, that's an Exchange Online Feature. It will work if your Mailbox is in Exchange Online.

Even your MX point's to OnPrem and the Mailflow forwards it to your Exchange Online Mailbox.

 

Regards

Andres

Copper Contributor

Hi @Andres-Bohren 

 

Got it. We do have OWA enabled for users. I'm assuming this should work? Please advise. Thank you.

Steel Contributor

@icuoras It works fine in OWA. See my Blog from last Year Article https://blog.icewolf.ch/archive/2021/03/12/exchange-online-mark-mails-from-external.aspx

Regards

Andres

Copper Contributor

Can you please advise if this feature will be available for Windows Outlook 2016/2019?

 

moatif_0-1652144457545.png

 

 

Bronze Contributor

Hi @moatif,

it works fine with my Build 15128.20206 Click-To-Run. 

Copper Contributor

Hello all,

it would be really nice if we could customize the look/format of the External sender tag. Especially in Outlook for Windows, many users tell me that the tag is too unobtrusive.
Is there any way to change the appearance of the tag (e.g. the color)?

Brass Contributor

As above it was mentioned that a little utility was to be supplied to customise the format. It's easy to miss. Being in red would help for starters.

Bronze Contributor

If you wish to customize a tag, use these third-party tools: https://www.ivasoft.com/tagexternalflow.shtml or https://www.ivasoft.com/tagexternal.shtml 

Both utilities use a category for tagging that means you can easily set a red warning.

Brass Contributor

I just started receiving an extra "External" tag in the From: field in Outlook client's Reading Pane (preview column) - see below screenshot for reference

mandreou_1-1664175271992.png

Note that I am on the Preview Channel, while the rest of our company is on Monthly channel.

 

Is there a plan to roll this out to other channels as well and is there an option to disable the tag in the From: field, but keep the one in the email body?

Copper Contributor

Is it possible to filter emails tagged in the above method as External in outlook using a rule? I want to move have a search folder in outlook to allow me to focus on external emails. 

Copper Contributor

Hey just submitted feedback on this recent update to the Outlook client on Windows that now displays the external tag. Awesome feature but we have several people that only receive external messages and it has started a usability issue in terms of them being able to easily glance at outlook to see messages. We really need a way to customize this feature a little bit by either turning it off for specific people or not showing the "External" tag in the FROM field.

 

I've submitted feedback here https://feedbackportal.microsoft.com/feedback/idea/508b2217-ff44-ed11-a81b-6045bd7fe4d3 and also instructing everyone at my company to submit feedback through Outlook. Any up votes would be awesome. We do need a way to visually smooth things out with this change.

Bronze Contributor

Hi @Craig Irvin,

have a look  at this: https://www.ivasoft.com/disabletaggingflow.shtml. This tool allows you to to turning off tagging for specific people.

 

Copper Contributor

Just wanted to mention my experience with this so far:

I reached out to Microsoft EXO support and our engineer showed me that it is working on his build which is Outlook 365 (64-bit) Build 2210 (16.0.15726.20070 - beta build), but on my current channel build 2209 (16.0.5629.20196) it is still NOT showing up sadly. I 'm not sure why it seems some tenants might see it, while others don't. We see it on all our mobile devices, mac laptops (Outlook for Mac clients) and Outlook on the Web (OWA/ Web version of Outlook desktop). If anyone has any thoughts or guidance as to how you got it working on your Windows Outlook Desktop client that would be great.

Microsoft

Just found out it doesn't work for below scenario:

- The test domain gonesy.club is accepted domain in EXO.

Nick_Gong_0-1667368557253.png

- But I have also configured this domain in AWS to send email.

- Sent email to any users of this tenant via xxx@gonesy.club .

Nick_Gong_1-1667368707501.pngNick_Gong_2-1667368716222.png

 

 

- The email was from external, but no "External" tag added. (The first email)

Nick_Gong_3-1667368812313.png

May I ask how does "Set-ExternalInOutlook" decide if the email is from external? 

 

Thanks!

Brass Contributor

The latest Office 365 update (Microsoft 365 MSO (Version 2211 Build 16.0.15831.20098) 64-bit) has the new External Sender Callout for Outlook. It just showed up for one of my users this morning. 

Brass Contributor

We have had this feature enabled for a while now and it has been working great for our mobile and web users, no issues. But with the addition of the External tag being added to Outlook Desktop, we have received many complaints that it is too prominent and distracting. The mobile and web external tags do not have a border around the tag and are less "in your face", but in Outlook it really stands out with the text box border. Any possibility of being able to adjust this visual in Outlook?

Brass Contributor

UPDATE: Getting a lot of complaints for just the Desktop version of Outlook... the callout is distracting (too bold).

 

Outlook web / mobile versions are much more subtle, and not one complaint for them.

 

If you can make Outlook Desktop's callout appear like it does in Outlook web (lighter grey, no border, etc.), it would be better in my opinion. We also like how unread messages on the web version don't change the callout to bold like it does in the Desktop version.

Brass Contributor

I just had someone ask me this morning about disabling it for them.  After waiting this long for the feature the design sure sucks.  

Brass Contributor

It's great, but why the Windows 95 styling? 

Copper Contributor

Great feature and nice to see in Desktop but would be nice to see better styling. Getting complaints. Thanks.

Brass Contributor

Love the idea and turned it on in April of 2021 with no complaints in the mobile implementation. Now that it's hit the desktop version, I'm getting visceral complaints on the styling and the way it impacts the layout of the recipients down the page. I'm pretty sure I'm not going to be able to fight off the complaints and be forced to turn it off. 

Brass Contributor

We also have the new "External" tag in the Message list now with Outlook 2211. 

@Paul_Brock Im curious, what exactly are your users complaining about? It impacts the layout of the recipients?

Also another alternative to turning it off, would be to keep it enabled and ignore the complaints. Or ally up with your cybersecurity officer and convince users that its important for the company to prevent data leakage. And that the external tag is helping with that!

Brass Contributor

@alex_ha19  If I can fend off the complaints or not is not the issue. This was a big miss by the UI team at Microsoft. Not being able to turn it off for high profile complainers and the visceral hate that some people have for this I haven't seen very many times in my career. Kind of reminds me of Clippy who was useful but poorly implemented. I'm not a UI guy and I can't tell you exactly what is wrong with it but the people that hate it, really hate it. 

Bronze Contributor

Hi @Paul_Brock, you can turn it off selectively: https://ivasoft.com/disabletaggingflow.shtml 

Brass Contributor

There is a hack to remove the external marking for an individual on the desktop version of outlook. In the outlook view simply add a field like BCC or CC or any address it seems, before the "From" column and it hides the external markings. I hope this helps someone fend off the haters. 

Copper Contributor

How is the value of the IsExternalSender MAPI property determined?  Is it based off the envelope-address?  the FROM address?  Exchange Online mail routing?  other?

Copper Contributor

I have performed some tests of this "External" call out feature.  I have sent test messages to myself, using an external unauthorized SMTP-relay server, spoofing the From address as a coworker's SMTP-address.  Even though the messages are clearly inbound, neither Outlook nor OWA applies the "External" call out to the messages.  When I look at the headers of these incoming messages, the SPF, DKIM, and DMARC tests fail, as expected.  The X-MS-Exchange-Organization-MessageDirectionality value is Incoming.  The X-MS-Exchange-OrganizatonAuthAs value is Anonymous.  Yet Outlook and OWA still do not apply the "External" call out to the messages.

 

This is obviously a crucial scenario for the "External" call out to be applied....perhaps more crucial than any other scenario.


Has anyone else tested this feature?

Copper Contributor

Since version 2301 (16130.20306) is in the Semi-Annual Enterprise Channel (Preview), the "External" flag is no longer displayed in the preview only in the mail himself. However, it was present in versions 2211 and 2212. Is this a bug?

Copper Contributor

@ice89 same here but with different versions. We use 2301 in our test environment and it worked perfectly. We have a customer with 400+ users where they wanted this setting enabled because they liked the tag itself in the preview, so we did. They are on 2302, and it's not showing up even if the Outlook version is officially on the supported list. The tag is there in OWA + under the subject, but not on the preview anymore. Can't find anything online to cover this issue/bug

 

Copper Contributor

I had to roll back from semi annual enterprise preview (2302 16130.20306) to monthly enterprise (2301 16026.20238) to get this working so it does look like an issue / bug with the preview channel. 

Copper Contributor

Just an important note about this feature to share with you all........

Per Microsoft's design, the IsExternalSender MAPI property is not set to TRUE if an external sender spoofs an SMTP-address that is assigned to a mailbox within your Exchange Online organization.  This is important for your mail users to be aware of, as the "External" call-out will not be applied to messages that spoof fellow mail users from the same Exchange Online organization.

So do not have your employees rely on this "External" call-out to differentiate someone maliciously phishing as an executive employee giving directions to do things.

While DMARC policy can route such spoofing messages to the Junk Email folder, they still will not have the "External" call-out applied to them by Outlook.

Steel Contributor

Can someone confirm that this is working on EDU Tenants?

Copper Contributor

Hi @Andres-Bohren , As we cant use this feature in out tenant due to version issue, can you please guide us what are the customized way of using transport rule to add external tag and avoid duplication when external sender keep replying to mail chain.

 

Copper Contributor

Hello Exchange Team,

is there any way one can change the external sender warning message by Microsoft? This message is rather tame and does not clearly alert to the possible risks of an email from external sources. We would like to add generic warnings.

Thank your for your help.

Kind regards,

Tom 

Deleted
Not applicable

Hi @The_Exchange_Team

I recently started seeing a banner in Outlook that says "External sender - This email was from outside your organization. Reply only if you know this sender and trust the content." How can I disable it, and where does it come from? It doesn't seem to be related to "Set-ExternalInOutlook" settings nor defender anti-phishing safety tips.

 

Paul_NJ_9-1702349321914.png

 

Copper Contributor

Is there a command to list the current Allowlist? Perhaps my reading skills are poor but I am unable to find anything about that in the documentation.

Brass Contributor

@Henrik1295 

 

Get-ExternalInOutlook | fl

Copper Contributor

Does it really still take 24-48 hours from enabling this to users starting to see the tags?  This article is pretty old now, and still refers to previews, old versions of Outlook etc.  It could really do with an update to reflect how things are in 2024!

Copper Contributor

@dunxdd 

I enabled this a few weeks ago and I while I did not clock it, it took much less than 24 h hours to start working.

Iron Contributor

Is this rolled out to all tenants yet or does it still require some organizations to change their organizational settings to “targeted” release?

We don’t want to change that setting not knowing what else that would change or enable.

Brass Contributor

Hi, I did this, and afterwards, only in Outlook Desktop (not New) Reactions are now not available for externally received emails. Is this intended? But they are available in OWA and Android Mobile app? 

Copper Contributor

Enabled this feature (Set-ExternalInOutlook -Enabled $true) on March 18th, on March 21st it still wasn't functioning. Disabled it, waited an hour, enabled it again, still isn't working.

Copper Contributor

@RickKJ-PinkNot all Outlook versions support this, are you using one which does?

Copper Contributor

@Henrik1295 tried using Outlook (O365 Apps) Current channel (2402), latest Outlook app on iOS, Outlook on the web, even the new "Outlook One" client. None of them show the External tag. My user account is set for Targeted release. (Other users that aren't don't see it either)

Should I just raise a ticket with MS perhaps?

Copper Contributor

@RickKJ-Pinkprobably best to raise it with MS.

Steel Contributor

@RickKJ-Pink Just to check - I believe the tags are only applied to new messages *after* you enable the setting, not existing ones. Have you tried sending a new message e.g. from a Gmail account a few days after the change?

Steel Contributor

For anyone who found the tags obstructive / intrusive - Microsoft appear to have very quietly modified Outlook for Windows in the latest builds (Current / Monthly Enterprise) to move the tag from the left to the right.

ChrisAtMaf_0-1713003651181.png

Hopefully this will be less intrusive for the people that were unhappy with it before. It resolves the problem where 'External' can be all that you see when using the Single view with narrow columns to list emails in a folder.

Co-Authors
Version history
Last update:
‎Oct 06 2023 08:59 AM
Updated by: