• Type: CUSTOMER
• Severity:  NOTICE
• Protection against: HUMAN ERROR
• CIS: M365 4.15 - (L2) Ensure MailTips are enabled for end users
• FIX Available: YES

This Customer Check verifies if MailTips are enabled.

Why this check?

MailTips are visible advisories to employees when they send an email outside the organization. These advisories occur if an email meets a potentially undesirable scenario, such as:

• Messages sent to extremely large distribution groups
• Messages sent to inappropriate distribution groups
• Messages inadvertently sent to recipients outside the organization
• Selecting Reply to All in messages received as a BCC recipient

More information about the MailTips functionality can be found here.

CIS Benchmarks

This measure aligns with the following item from the Center for Internet Security (CIS) Microsoft 365 Foundations Benchmark: 

• CIS M365 4.15 - (L2) Ensure MailTips are enabled for end users

What possible outcomes does the check have?

This check has two possible outcomes. In Attic, this is reflected as follows:

• Okay: MailTips are enabled
• Notice: MailTips are not enabled

How should this be followed up?

If the output is Notice, we advise enabling MailTips.

A Fix is available for this check, which we will offer via Attic.

The settings that are configured:
"MailTipsAllTipsEnabled": true,
"MailTipsExternalRecipientsTipsEnabled": true,
"MailTipsGroupMetricsEnabled": true,
"MailTipsLargeAudienceThreshold": 10