Troubleshooting mail related issue usually requires analyzing the raw mail content including mail headers, mail body and attachments. Therefore, directly forwarding the mail in question can't meet the requirement.

Make sure to export the mail samples in *.msg or *.eml format.

Different environment and mail client software have different approach to collect mail samples. The following are some examples:

Collecting mail samples from Outlook Web App

1. Access Outlook Web App by logging in to https://outlook.office.com/.
2. Start a new message.

   

   ^{Click the image to enlarge.}

3. Click to edit the message in a new window.

   

   ^{Click the image to enlarge.}

4. Select all emails you would like to download, and then drag the emails to the new message. This will add them as attachments.

   

   ^{Click the image to enlarge.}

5. Click the down arrow on the attachment and download the email message (will be saved in .eml format), or send the message to yourself and then download all attachments (will be saved in .msg format).

   

   ^{Click the image to enlarge.}

Collecting mail samples in Outlook 2019

1. Locate and select the mail sample in Outlook, then click File in the menu.

   

   ^{Click the image to enlarge.}

2. Select Save As, then save the mail in .msg format.

   

The service was provisioned before but failed and stuck. Please contact Trend Micro Technical Support with the issue description, and the CLP account information. CAS OPS team can clean up the provision status and then the service can be provisioned again.

^{Click the image to enlarge.}

Usually a user was skipped because CAS encountered some error when scanning his/her email or files. The most seen root cause is that Office365 throttled the API requests. During busy hours, there were too many API requests from CAS to Office 365 in the meantime, so Office365 throttle on API request is triggered.

To confirm if this is the case, please try again during off-hours.

^{Click the image to enlarge.}

The error usually show up when you accessed the wrong site. For example, your Sharepoint admin site is - https://yourdomainname-admin.sharepoint.com, but you accessed https://yourdomainname.sharepoint.com/_layouts/15/TA_AllAppPrincipals.aspx.

^{Click the image to enlarge.}

Background

When provisioning/deprovisioning Office365 Sharepoint, OneDrive or Teams, you are required to access Sharepoint admin site (https://{sharepoint_admin_site}/_layouts/15/TA_AllAppPrincipals.aspx) to add or remove the related apps.