Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Please note that this forum is a public platform. Kindly ensure that you hide any personal or organizational information to protect personal data.
Since the account is a Microsoft 365 Business Standard tenant and you are the sole user and Global Administrator, the alert indicates that Microsoft detected activity that resembled spam or account compromise and automatically placed the mailbox in a restricted state. This restriction can occur even if the account owner did not intentionally send bulk email.
As the tenant administrator, you may want to review the following:
- Check whether there are any active alerts, risky sign-ins, or suspicious activities associated with the account in the Microsoft 365 Defender/Security portal.
- Verify that no unexpected inbox rules, forwarding rules, delegates, or connected applications have been configured on the mailbox.
- Review recent sign-in activity and confirm that all sign-ins originated from expected locations and devices.
- Run a full malware and antivirus scan on the affected device and ensure Windows and Office are fully up to date.
- Reset the account password and enable or review Multifactor Authentication (MFA) settings if they are not already in place.
If the account has already been restricted from sending outbound email, and especially if the guidance provided so far is difficult to follow, I would recommend opening a support request directly through the Microsoft 365 Admin Center. Since this is a Business subscription, Microsoft Support can review the restricted-user status, determine what triggered the restriction, and advise whether additional remediation steps are required before sending privileges can be restored.
Also, the 550 5.1.8 Access denied, bad outbound sender AS(42004) error is consistent with a mailbox that has been blocked from outbound sending due to Microsoft's anti-spam or compromise detection systems, so resolving the underlying restriction is typically the primary step before mail flow can resume.
I hope this information helps.