Some Office 365 accounts rejecting internal messages

[andyt57]

Our school Office 365 domain has about 35 users.

 

We have just discovered that 2 users are bouncing internal emails. If anyone tries to send an email to either of the users they get:

 

Delivery has failed to these recipients or groups:

xx ([email protected])

Your message wasn't delivered because the recipient's email provider rejected it.

Diagnostic information for administrators:

Generating server: AS8PR01MB7606.eurprd01.prod.exchangelabs.com

[email protected]

Remote Server returned '550 5.7.520 Access denied, Your organization does not allow external forwarding. Please contact your administrator for further assistance. AS(7555)'

 

I have checked both of the users accounts and neither have any mail forwarding set. And it is only affecting these 2 users.

 

Does anyone know what might be going on?

Andy

[Anonymous2000]

Have you checked if they have set a rule up in outlook to forward. I had one recently where there was nothing in exchange showing as forwarding but they had set themselves a rule up. There is a report in the Office 365 admin centre but I don’t recall where it is. If someone doesn’t beat me to it I will have a look on Monday and add to the post.

[NetworkNinja]

I experienced this last week and after some research I found a policy had been enforced. We have some users who have forwarding turned on to other email accounts. Basically external forwarding was disabled.

 

To allow this you need to visit the security and compliance page within office 365 - Anti Spam Page - expand outbound spam filter policy - edit policy and set external forwarding to on - forwarding is enabled.

 

https://protection.office.com/antispam

 

Let me know how you get on.

Edited November 20, 2020 by JJames

[bigjb]

I experienced this last week and after some research I found a policy had been enforced. We have some users who have forwarding turned on to other email accounts. Basically external forwarding was disabled.

 

To allow this you need to visit the security and compliance page within office 365 - Anti Spam Page - expand outbound spam filter policy - edit policy and set external forwarding to on - forwarding is enabled.

 

https://protection.office.com/antispam

 

Let me know how you get on.

 

For info this is the change in the Message Center - caught me unaware

 

(Updated) Follow up to MC221119: Office 365 ATP External email forwarding controls and policy change

MC223421, Plan For Change, Published date: 2 Oct 2020

[Anonymous2000]

I think there needs to be some internal discussion before you just turn it on. I had a member of staff forwarding all their work email to their personal hotmail account.

 

I think given emails could contain sensitive data allowing staff to ping them automatically outside your system may have GFPR/safeguarding issues.

[NetworkNinja]

No choic for me to turn it back on. We are part of a trust however they have separate emails for each school still. Yes it has been suggested to have one email domain but the powers of be don't want that at the moment.

 

They forward there emails from our email domain to there main school email they use.

[Anonymous2000]

I guess forwarding within school systems is fine. For me they were forwarding to random personal hotmail addresses which I think is a different matter.

[dapaulio]

Connect to exchange online in power shell and run a message trace

get-messagetrace -status failed | get-messagetracedetail

 

You can use other filters to narrow down also but It will give you the reason for why each failed

 

Message trace will only return up to 10 days history by default.

[andyt57]

I experienced this last week and after some research I found a policy had been enforced. We have some users who have forwarding turned on to other email accounts. Basically external forwarding was disabled.

 

To allow this you need to visit the security and compliance page within office 365 - Anti Spam Page - expand outbound spam filter policy - edit policy and set external forwarding to on - forwarding is enabled.

 

https://protection.office.com/antispam

 

Let me know how you get on.

 

I tried that change and it worked, thanks. I then investigated a bit more and they were both forwarding to their personal email accounts. That is not allowed so I turned off automatic forwarding again on the Security & Compliance page and also disabled automatic forwarding in their mail settings.

 

I'll leave the Asst Head to have a word with them.

 

Andy