How do I block a user automatically if he sends more than 50 mails within 60 minutes from his Exchange Online Account? The content (size, number of attachments, etc.) of the mail does not matter. The mail recipient or the type or location of the login (web, app, mobiles device) is also irrelevant. It is about the implementation of an internal compliance rule.