Error 5.7.705: acceso denegado, el inquilino ha superado el umbral

[EmmRoHe]

Saludos.

Tengo un cliente que ha superado el umbral de correos salientes, debido a que parece que le robaron las credenciales, creando muchos usuarios y a parir de ahí enviaron más de 15K correos. Por lo tanto, Microsoft ha bloqueado él envió de correos.

Ya he estado aplicando los pasos para comprender el motivo Corregir problemas de entrega de correo electrónico para los códigos de error de 5.7.700 a 5.7.750 e...

¿Alguien tiene experiencia en este tipo de caso? 

Me pueden ayudar explicando como lo han solucionado. El cliente está en España.

[#2 · Accepted solution]

@EmmRoHe I understand that the tenant was blocked from sending emails due to compromised account and you need to have it resolved.

If you are receiving an NDR of 5.7.705: Access denied, tenant has exceeded threshold, you need to log a support request from the Office 365 Admin Center as Microsoft can only be the one to release the tenant.

But before you log a support request, please make sure of the following:

• Reset the password of the compromised account
• Enable multifactor authentication on one of the global administrators and make sure that it is properly set up as this would be a requirement by the support representative to have the tenant released
• Delete unfamiliar inbound connectors (From the Exchange Admin Center -> Mail Flow -> Connectors)
  
• Delete unfamiliar transport rules (From the Exchange Admin Center -> Mail Flow -> Connectors)
  
• Delete unfamiliar inbox rules on the compromised account (Login using the compromised account -> Open Outlook Web App -> Settings -> View all Outlook Settings -> Mail -> Rules)
  

If I have answered your question, please mark your post as Solved

If you like my response, please give it a Like 

Appreciate your Kudos! Proud to contribute! :)

[#3]

Thanks @Deleted it's great have you answer. The same time I talking with support of Microsoft. And part of you answer doing for this solution.

Adicional, dentro de Azure Active Directory en la sección Administrar / Registros de aplicaciones / Todas las aplicaciones se eliminó la aplicación que aparecía en esa área.