Remote Server returned '550 5.7.705 Service unavailable. Access denied,tenant has exceeded threshold

%3CLINGO-SUB%20id%3D%22lingo-sub-1209046%22%20slang%3D%22de-DE%22%3ERemote%20Server%20returned%20'550%205.7.705%20Service%20unavailable.%20Access%20denied%2Ctenant%20has%20exceeded%20threshold%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1209046%22%20slang%3D%22de-DE%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20not%20able%20to%20send%20emails%20for%20one%20weeks%20now.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20send%20an%20E-Mail%20I%20immediately%20receive%20a%20Mail%20containing%20the%20error%20named%20in%20subject.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20need%20to%20send%20mails.%20Could%20anybody%20help%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%3C%2FP%3E%3CP%3EStefan%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1209046%22%20slang%3D%22de-DE%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1209360%22%20slang%3D%22en-US%22%3ERe%3A%20Remote%20Server%20returned%20'550%205.7.705%20Service%20unavailable.%20Access%20denied%2Ctenant%20has%20exceeded%20thres%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1209360%22%20slang%3D%22en-US%22%3E%3CP%3EOpen%20a%20support%20case.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1219242%22%20slang%3D%22de-DE%22%3ESubject%3A%20Remote%20Server%20returns%20'550%205.7.705%20Service%20unavailable.%20Access%20denied%2Ctenant%20has%20exceeded%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1219242%22%20slang%3D%22de-DE%22%3E%3CP%3EI%20already%20opend%20a%20support%20case%20and%20after%203%20hours%20phone%20with%20supporter%20no%20solution%20could%20be%20found.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1219559%22%20slang%3D%22en-US%22%3ERe%3A%20Remote%20Server%20returned%20'550%205.7.705%20Service%20unavailable.%20Access%20denied%2Ctenant%20has%20exceeded%20thres%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1219559%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F574326%22%20target%3D%22_blank%22%3E%40stefan_hi%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20refer%20to%20the%20article%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-sg%2Fhelp%2F4498191%2Ftenant-has-exceeded-threshold-error-when-you-send-mail%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%22Tenant%20has%20exceeded%20threshold%22%20NDR%20when%20mail%20is%20sent%20from%20your%20organization%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20describe%20the%20causes%20of%20it%20but%20you%20can%20also%20do%20the%20%3CSTRONG%3EResolution%3C%2FSTRONG%3E%20part.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20says%3A%20-%26gt%3B%20To%20fix%20this%20issue%2C%20follow%20these%20steps%3A%3C%2FP%3E%3CUL%20class%3D%22lia-list-style-type-square%22%3E%3CLI%3ERemove%20any%20unknown%20or%20unused%20inbound%20connectors%20from%20Office%20365.%20To%20do%20this%2C%20follow%20these%20steps%3A%3CBR%20%2F%3EGo%20to%20Exchange%20Admin%20Center%2C%20and%20sign%20in%20as%20an%20Exchange%20Online%20administrator.%3CBR%20%2F%3ESelect%20mail%20flow%20in%20the%20left-hand%20frame%2C%20and%20click%20connectors.%3CBR%20%2F%3EIf%20any%20connectors%20already%20exist%20for%20your%20organization%2C%20you%20can%20see%20them%20listed%20here.%20If%20you%20see%20any%20connectors%20that%20don't%20belong%2C%20you%20should%20remove%20them%20by%20selecting%20the%20connector%20and%20clicking%20the%20Trash%20icon.%20The%20following%20screenshot%20shows%20some%20sample%20connectors%20that%20you%20should%20have%20if%20you%20are%20in%20a%20hybrid%20scenario.%20All%20other%20connectors%20should%20be%20inspected%20and%20removed%20if%20they%20are%20not%20required.%3CBR%20%2F%3EAn%20example%20of%20connectors%20to%20and%20from%20Contoso%20email%20server%3C%2FLI%3E%3C%2FUL%3E%3CUL%3E%3CLI%3ECheck%20the%20audit%20logs%20to%20determine%20whether%20a%20connector%20was%20created%20recently.%20Spammers%20are%20known%20to%20create%20connectors%2C%20send%20out%20lots%20of%20mail%20on%20that%20connector%2C%20and%20then%20delete%20the%20connector%20to%20cover%20their%20tracks.%3CBR%20%2F%3EBecause%20an%20admin%20account%20was%20compromised%2C%20change%20the%20passwords%20for%20all%20your%20admins.%3CBR%20%2F%3ETo%20prevent%20future%20compromise%2C%20enable%20multi-factor%20authentication%20(MFA)%20for%2C%20at%20least%2C%20the%20admin%20accounts.%20For%20more%20information%2C%20see%20Set%20up%20multi-factor%20authentication.%3CBR%20%2F%3EContact%20Microsoft%20Support%20to%20unblock%20the%20tenant.%3C%2FLI%3E%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1221658%22%20slang%3D%22de-DE%22%3ERe%3A%20Remote%20Server%20returned%20'550%205.7.705%20Service%20unavailable.%20Access%20denied%2Ctenant%20has%20exceeded%20thres%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1221658%22%20slang%3D%22de-DE%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F356533%22%20target%3D%22_blank%22%3E%40Gervs%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanky%20for%20this%20hint.%3C%2FP%3E%3CP%3EAll%20names%20points%20(Connectors%2C%20Passwords%2C%20MFA...)%20I%20already%20checked%20on%20my%20own%20resprectivly%20together%20with%20and%20supporter%20of%20Microsoft.%20Unfortunately%2C%20nothing%20worked.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20haven't%20been%20able%20to%20send%20mails%20for%20two%20weeks%20now.%20And%20nobody%20at%20Microsoft%20seems%20to%20be%20able%20to%20identify%20and%20fix%20the%20reason%20for%20the%20problem.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThen%20unfortunately%20I%20will%20have%20to%20switch%20to%20Google%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsad_40x40_1.gif%22%20alt%3D%22%3Asad%3A%22%20title%3D%22%3Asad%3A%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1221984%22%20slang%3D%22en-US%22%3ERe%3A%20Remote%20Server%20returned%20'550%205.7.705%20Service%20unavailable.%20Access%20denied%2Ctenant%20has%20exceeded%20thres%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1221984%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F574326%22%20target%3D%22_blank%22%3E%40stefan_hi%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F356533%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3E%40Gervs%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%20made%20a%20nice%20point%20there.%20That%20could%20help.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1221985%22%20slang%3D%22de-DE%22%3ERe%3A%20Remote%20Server%20returned%20'550%205.7.705%20Service%20unavailable.%20Access%20denied%2Ctenant%20has%20exceeded%20thres%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1221985%22%20slang%3D%22de-DE%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F577308%22%20target%3D%22_blank%22%3E%40briandonforio%3C%2FA%3E%20What%20do%20you%20mean%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hello,

 

I'm not able to send E-Mails for one week now.

 

If I send an E-Mail I immediately receive a Mail containing the error named in subject.

 

I need to send mails. Could anybody help?

 

Thanks in advance!

 

Regards

Stefan

6 Replies
Highlighted
Highlighted

I already opend a support case and after 3 hours phone with supporter no solution could be found.

Highlighted

@stefan_hi 

 

You can refer to the article "Tenant has exceeded threshold" NDR when mail is sent from your organization

 

It describe the causes of it but you can also do the Resolution part.

 

It says: -> To fix this issue, follow these steps:

  • Remove any unknown or unused inbound connectors from Office 365. To do this, follow these steps:
    Go to Exchange Admin Center, and sign in as an Exchange Online administrator.
    Select mail flow in the left-hand frame, and click connectors.
    If any connectors already exist for your organization, you can see them listed here. If you see any connectors that don't belong, you should remove them by selecting the connector and clicking the Trash icon. The following screenshot shows some sample connectors that you should have if you are in a hybrid scenario. All other connectors should be inspected and removed if they are not required.
    An example of connectors to and from Contoso email server
  • Check the audit logs to determine whether a connector was created recently. Spammers are known to create connectors, send out lots of mail on that connector, and then delete the connector to cover their tracks.
    Because an admin account was compromised, change the passwords for all your admins.
    To prevent future compromise, enable multi-factor authentication (MFA) for, at least, the admin accounts. For more information, see Set up multi-factor authentication.
    Contact Microsoft Support to unblock the tenant.
Highlighted

@Gervs 

Thanky for this hint.

All names points (Connectors, Passwords, MFA...) I already checked on my own resprectivly together with and supporter of Microsoft. Unfortunately, nothing worked.

 

I have not been able to send mails for two weeks now. And nobody at Microsoft seems to be able to identify and fix the reason for the problem.

 

Then unfortunately I will have to switch to Google :sad:

Highlighted

@stefan_hi 

@Gervs  made a nice point there. That could help.

Highlighted