Home

blocked

%3CLINGO-SUB%20id%3D%22lingo-sub-1077714%22%20slang%3D%22en-US%22%3Eblocked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1077714%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20of%20my%20user%20has%20been%20blocked%20from%20sending%20emails%20as%20he%20has%20sent%20more%20than%20500%20emails.%3CBR%20%2F%3Eso%20i%20have%20unblocked%20him%2C%20i%20want%20to%20know%20how%20many%20times%20the%20user%20was%20blocked%20and%20unblocked%20in%20last%20one%20week%2C%20is%20it%20possible%20to%20get%20this%20information.%3C%2FP%3E%3CP%3E%3CSPAN%3Efrom%20shell%20is%20it%20possible%20to%20get%20the%20current%20status%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1077714%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1085371%22%20slang%3D%22en-US%22%3ERe%3A%20blocked%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085371%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F144450%22%20target%3D%22_blank%22%3E%40Roger%20Roger%3C%2FA%3E%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20check%20the%20Audit%20logs%20from%20Azure%20Active%20Directory.%26nbsp%3B%3C%2FP%3E%3CP%3EGo%20to%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Faad.portal.azure.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faad.portal.azure.com%3C%2FA%3E%2C%20go%20to%20Users%20%26gt%3B%20Audit%20Logs.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20get%20the%20current%20status%20of%20the%20user%20through%20PowerShell%3A%3C%2FP%3E%3CP%3E1.%20Connect%20to%20Office%20365%20through%20PowerShell.%20Ref%20article%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fenterprise%2Fpowershell%2Fconnect-to-office-365-powershell%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fenterprise%2Fpowershell%2Fconnect-to-office-365-powershell%3C%2FA%3E%3C%2FP%3E%3CP%3E2.%20After%20connecting%20to%20Office%20365%20services%2C%20enter%20command%26nbsp%3B%22%3CSTRONG%3EGet-MSOLUser%20-UserPrincipalName%20%3CA%20href%3D%22mailto%3Axxxx%40contoso.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Exxxx%40contoso.com%3C%2FA%3E%20%7C%20select%20BlockCredential%22%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E3.%20If%20this%20is%20True%2C%20means%20user%20is%20blocked.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20also%20recommend%20you%20to%20check%20if%20the%20user%20account%20was%20compromised%2C%20because%20bulk%20emails%20are%20considered%20as%20Spam%20and%20that's%20the%20reason%20the%20account%20is%20getting%20blocked.%26nbsp%3B%3C%2FP%3E%3CP%3ECheck%20if%20there%20forwarding%20rule%20created%20in%20Outlook%20on%20the%20Web.%20Also%2C%20you%20can%20enabled%20MFA%20to%20ensure%20that%20the%20account%20doesn't%20get%20compromised.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Frequent Contributor

Hi 

One of my user has been blocked from sending emails as he has sent more than 500 emails.
so i have unblocked him, i want to know how many times the user was blocked and unblocked in last one week, is it possible to get this information.

from shell is it possible to get the current status?

1 Reply
Highlighted

Hello @Roger Roger

 

You can check the Audit logs from Azure Active Directory. 

Go to https://aad.portal.azure.com, go to Users > Audit Logs.

 

To get the current status of the user through PowerShell:

1. Connect to Office 365 through PowerShell. Ref article - https://docs.microsoft.com/en-us/office365/enterprise/powershell/connect-to-office-365-powershell

2. After connecting to Office 365 services, enter command "Get-MSOLUser -UserPrincipalName xxxx@contoso.com | select BlockCredential"

3. If this is True, means user is blocked. 

 

I would also recommend you to check if the user account was compromised, because bulk emails are considered as Spam and that's the reason the account is getting blocked. 

Check if there forwarding rule created in Outlook on the Web. Also, you can enabled MFA to ensure that the account doesn't get compromised. 

 

Thanks!

 

 

 

 

Related Conversations
Hide tasks from task board when parent item is blocked
gresdawg in Azure on
0 Replies