This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(240, 65%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETO%3C/text%3E%3C/svg%3E)
Recently, after the deprecation of Get-MailDetailSpamReport and Get-MailDetailMalwareReport command-lets, Microsoft has suggested using Get-MailDetailATPReport to get that information. Even searching for those two deprecated command-lets land on the MS doc for Get-MailDetailATPReport.
But the new command-let, Get-MailDetailATPReport doesn't return any data for my tenant. However, I was using Get-MailDetailSpamReport and Get-MailDetailMalwareReport to get info on my tenant until it was deprecated. Though I am able to see the results in UI (https://security.microsoft.com/reports/TPSEmailSpamReportATP), the Get-MailDetailATPReport returns no data.
I was able to create another trial tenant of the same subscription (M365 E3) yet it didn't work. I did some research and found that It didn't work in M365 Business tenants as well. Contrarily E5 tenants only worked.
It is a bug that the values are displayed in UI but not returned in PowerShell. As the command-lets were deprecated recently, I'm sure this issue will be noticed by many organizations.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 67%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Hi @Tony Oscar
According to the test in my environment, I can get the result returned by the command Get-MailDetailATPReport for my E3 subscription.
However, I'm not able to access the content in the address https://security.microsoft.com/reports/TPSEmailSpamReportATP
It works with: https://security.microsoft.com/reports/TPSAggregateReport
From Exchange server side, please check the permission firstly, make sure the user/admin has right roles to run this command:
If the permission/roles are correct, the command still not work for you, I would suggest you open a service request with o365 backend engineers to feedback your issue, they will be able to check if any error with your environment.
Get support: https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-support?view=o365-worldwide
Hi @Tony Oscar
Is there any update about your issue? Have you tried contacting the o365 backend engineers to get further support?
Apologies for the delayed reply, @Joyce Shen - MSFT . I assume you may have a Microsoft Defender plan for your tenant. In one of my tenants, we are using Microsoft 365 Business essentials where I was getting the spam email details from Get-MailDetailSpamReport and malware email details from Get-MailDetailMalwareReport. Now, these command-lets were deprecated and their suggested alternative Get-MailDetailATPReport returns no result.
My team has raised a support request with Microsoft with all the details. But I think they haven't contacted the backend engineers and I'm still waiting for a solution. Our Case ID is #:29338581. If you can contact a backend team regarding this, I would greatly appreciate that.
Let me know if you need further information to land on a solution for this. I'll be happy to work with you in resolving this.
It has a dependence on ATP ("Defender") SKU I believe, though my expectation was that this would be removed once the old cmdlets are deprecated. Oh well...
You should at least have access to Get-MailTrafficATPReport, which gives the summaries.
Get-MailTrafficATPReport doesn't give data that were returned by Get-MailDetailSpamReport and Get-MailDetailMalwareReport. Hence Microsoft must give those data via some other command-let before deprecating the command-lets which they didn't.
However, the data is visible in UI. Hence my tenant must have the capability to get the data via PowerShell in my opinion. I'm hoping Microsoft could share some information on this, here.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 98%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFE%3C/text%3E%3C/svg%3E)
@Tony Oscar this issue was fully resolved Worldwide as of October 14th 2022. please let us know if you are still experiencing issues with the Get-MailDetailATPReport cmdlet.