John,
The issue is not with the end user. Stop implying it is. The issues are technical: DMARC, DKIM, etc are not implemented correctly.
- Very obvious spam/phish is delivered to the inbox while the message not passing DMARC or spam score settings. (the HELO/FROM and sender mail address don't match)
- Next, no matter how many rules you put in Outlook about blocking keywords, HELO/FROM message headers, subjects, senders.. NONE OF THOSE RULES APPLY to spam. EVERY MESSAGE GETS DELIVERED to the Junk mailbox while the rule is saying DELETE. Thank you for allowing 50-100 spam messages daily because of Microsoft's inability to do something about this.
- I have reported every spam/phish for years now, and still the SAME MESSAGE (same content, same sender, same links, etc.) is happily delivered to my mailbox. How many times I reported Lowe's spam, casino crap, Anderson's Home Renovation and every other crap out there is, I still get the same crap delivered. Can you explain to me, without lying and honestly, why is there even a report button in Outlook? And don't give me that Microsoft bull about how they value us as customers and that every reported message gets analysed. You know it darn well, it is just what's on your cue card to copy and paste on forums like these.
- Blocking sender domains using the Outlook settings > Junk settings is a total laughter. Every domain I put there, including ALL THE DOMAINS from the message header (HELO/FROM/SMTP.MAILFROM), gets delivered EVEN IF THE MESSAGE MATCHES THE DOMAIN NAME. How on earth is this possible for a company that invented Exchange and has 30+ years of mail deliver knowledge? Can you still say this is an end-user issue and not Microsoft's fault? If the answer is still yes, please leave this forum and rethink your career choices.