Exchange Online Protection for On-Prem Exchange

%3CLINGO-SUB%20id%3D%22lingo-sub-226952%22%20slang%3D%22en-US%22%3EExchange%20Online%20Protection%20for%20On-Prem%20Exchange%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-226952%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20been%20trying%20to%20resolve%20this%20with%20Microsoft%20support%20but%20I%20am%20not%20getting%20anywhere.%20I%20am%20setting%20up%26nbsp%3BExchange%20Online%20Protection%20for%20On-Prem%20Exchange%20and%20most%20of%20configurations%20have%20had%20no%20issue%20but%20I%20have%20started%20to%20receive%20two%20error%20messages%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%23550%205.7.64%20TenantAttribution%3B%20Relay%20Access%20Denied%20-%20This%20is%20when%20i%20email%20a%20non%20Office%20365%26nbsp%3Btenant%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%23551%204.4.62%20Mail%20sent%20to%20the%20wrong%20Office%20365%20region.%20ATTR35.%20For%20more%20information%20please%20go%20to%20%3CA%20href%3D%22https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D865268%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D865268%3C%2FA%3E%20-%20This%20is%20when%20i%20email%20an%20Office%20365%20tenant.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20anyone%20seen%20this%20before%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-226952%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-227528%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Protection%20for%20On-Prem%20Exchange%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-227528%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20the%20reply.%20Finally%20figured%20it%20out.%20I%20was%20using%20our%20CSP%20portal%20to%20access%20our%20clients%20Exchange%20Admin%20center%20(so%20I%20didn%E2%80%99t%20need%20to%20log%20into%20each%20tenant%E2%80%99s%20Global%20admin%20account%20individually).%20Within%20here%20I%20was%20creating%20the%20send%5Creceive%20connectors%20and%20everything%20looked%20good%20but%20did%20not%20work.%20However%20when%20I%20logged%20directly%20into%20our%20clients%20tenant%20with%20the%20Global%20Admin%20account%20none%20of%20the%20send%5Creceive%20connectors%20were%20there.%20I%20created%20them%20again%20from%20within%20the%20clients%20tenant%20and%20everything%20working%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-227432%22%20slang%3D%22en-US%22%3ERe%3A%20Exchange%20Online%20Protection%20for%20On-Prem%20Exchange%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-227432%22%20slang%3D%22en-US%22%3ESurprised%20MS%20support%20could%20not%20answer%20this%20one.%20The%20smart%20host%20target%20server%20name%20you%20enter%20in%20your%20on-premises%20send%20connector%20must%20match%20the%20MX%20value%20as%20shown%20in%20the%20DNS%20settings%20values%20in%20Office%20365.%3C%2FLINGO-BODY%3E
Contributor

Hi All,

 

I have been trying to resolve this with Microsoft support but I am not getting anywhere. I am setting up Exchange Online Protection for On-Prem Exchange and most of configurations have had no issue but I have started to receive two error messages:

 

 #550 5.7.64 TenantAttribution; Relay Access Denied - This is when i email a non Office 365 tenant

 

#551 4.4.62 Mail sent to the wrong Office 365 region. ATTR35. For more information please go to https://go.microsoft.com/fwlink/?linkid=865268 - This is when i email an Office 365 tenant.

 

Have anyone seen this before?

2 Replies
Surprised MS support could not answer this one. The smart host target server name you enter in your on-premises send connector must match the MX value as shown in the DNS settings values in Office 365.

Thanks for the reply. Finally figured it out. I was using our CSP portal to access our clients Exchange Admin center (so I didn’t need to log into each tenant’s Global admin account individually). Within here I was creating the send\receive connectors and everything looked good but did not work. However when I logged directly into our clients tenant with the Global Admin account none of the send\receive connectors were there. I created them again from within the clients tenant and everything working