Processes in Microsoft 365 for setting up Office apps, redeeming product keys, and activating licenses.
A blocked Microsoft 365 sender can usually be restored by an admin from the Restricted entities page, but the account should be checked first for compromise or spam-like activity before unblocking it.
- In the Microsoft Defender portal, open Restricted entities at
https://security.microsoft.com/restrictedusers. - Confirm the affected mailbox appears there. A blocked sender typically also gets NDR 550 5.1.8 Access denied, bad outbound sender.
- Before removing the block, verify why it happened:
- Check sign-in logs for suspicious activity.
- Check for unknown inbox rules or forwarding rules.
- Review recent sent items to confirm the messages were legitimate.
- If the account was not compromised, remove the user from Restricted entities.
- Allow time for the restriction to clear after unblocking.
To reduce the chance of this happening again:
- If this mailbox is being used for bulk or list mail, use bulk-sender practices instead of sending all messages at once.
- Spread sends over time and do not exceed 30 messages per minute per mailbox.
- Maintain list hygiene and include a working unsubscribe option for bulk mail.
- Configure outbound spam policies with appropriate per-hour and daily limits and notifications.
- Make sure Email sending limit exceeded alert policies are enabled.
- Enable MFA on the account.
- Review mail flow reports and message traces periodically.
There is no documented permanent ignore/exemption on the Restricted entities page. The documented approach is to investigate the cause, unblock the user, and prevent recurrence with outbound spam policy and bulk-sending practices.
References: