User restricted from sending email false positive

%3CLINGO-SUB%20id%3D%22lingo-sub-2753714%22%20slang%3D%22en-US%22%3EUser%20restricted%20from%20sending%20email%20false%20positive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2753714%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20an%20email%20address%20that%20keeps%20getting%20blocked%20from%20sending%20emails%20with%20the%20alert%20saying%20%22%3CSTRONG%3EUser%20has%20been%20restricted%20from%20sending%20messages%20outside%20the%20organization%20due%20to%20potential%20compromised%20activity.%3C%2FSTRONG%3E%22%20This%20is%20a%20false%20positive%20and%20the%20email%20address%20keeps%20getting%20blocked%20after%20unblocking.%20What%20action%20should%20I%20take%20to%20not%20let%20this%20happen%20again%20without%20removing%20protection%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2753714%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDefender%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDefender%20for%20Office%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EO365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2765516%22%20slang%3D%22en-US%22%3ERe%3A%20User%20restricted%20from%20sending%20email%20false%20positive%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2765516%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F895942%22%20target%3D%22_blank%22%3E%40tk298%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20is%20the%20reason%20for%20the%20block%3F%20There%20are%20several%20ways%20to%20tackle%20this%20issue%20without%20removing%20security%20but%20you%20first%20need%20to%20find%20out%20the%20reason%20for%20the%20block%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20example%2C%20if%20you%20send%20200%20emails%20within%205%20minutes%20you%20are%20likely%20to%20get%20blocked.%20All%20depends%2C%20on%20your%20organisation%20email%20policies.%20You%20need%20to%20find%20out%20what%20policy%20is%20getting%20triggered.%20With%20this%20information%20I%20should%20be%20able%20to%20help%20you%20further.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3EJose%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

We have an email address that keeps getting blocked from sending emails with the alert saying "User has been restricted from sending messages outside the organization due to potential compromised activity." This is a false positive and the email address keeps getting blocked after unblocking. What action should I take to not let this happen again without removing protection?

 

Thank you

1 Reply

Hello @tk298 

 

What is the reason for the block? There are several ways to tackle this issue without removing security but you first need to find out the reason for the block? 

 

For example, if you send 200 emails within 5 minutes you are likely to get blocked. All depends, on your organisation email policies. You need to find out what policy is getting triggered. With this information I should be able to help you further.

 

Thanks,

Jose 

www.000webhost.com