Office365 Recipient address rejected: Access denied

Funny thing happend……

For some reason new email accounts (older then 24 hours) and email aliases was not working properly within Office365.

External contacts was reporting:

tried to deliver your message, but it was rejected by the server for the recipient domain mydomain by mydomain.mail.protection.outlook.com

550 5.4.1 [<username>@<mydomain>]: Recipient address rejected: Access denied

Reason:

  • Accounts was is getting propagated in an accepted time frame (24 hours)

Issue:

  •  The affected accounts is unable to receive email from external contacts – emails are not getting delivered.

Resolution:

  • We changed the accepted domain to Internal relay to resolve the issue.
  • As a precaution we enabled Conditional Sender ID and NDR backscatter to avoid spam attacks.

Articles on Mail Flow for reference:

Exchange Online Protection Limits

https://technet.microsoft.com/en-in/library/exchange-online-protection-limits.aspx

How Office 365 does SPF checks for customer-to-customer mail

http://blogs.msdn.com/b/tzink/archive/2015/02/26/how-office-365-does-spf-checks-for-customer-to-customer-mail.aspx

Manage Transport Rules

http://technet.microsoft.com/en-us/library/jj657505(v=exchg.150).aspx

Transport rules

https://technet.microsoft.com/en-IN/library/jj919238(v=exchg.150).aspx

Configure your spam filter policies

http://technet.microsoft.com/en-us/library/jj200684(v=exchg.150).aspx

Submitting spam and non-spam messages to Microsoft for analysis

http://technet.microsoft.com/en-IN/library/jj200769(v=exchg.150).aspx

Advanced spam filtering options

http://technet.microsoft.com/en-us/library/jj200750(v=exchg.150).aspx

Spam email and Office 365 environment

http://blogs.technet.com/b/exchange/archive/2014/07/25/spam-email-and-office-365-environment-overview.aspx

Import-Mailbox fails occasionally

To import data from a .pst file, you must run the Import-Mailbox cmdlet from a 32-bit computer that has the following installed;

# 32-bit version of the Exchange management tools (download link : http://www.microsoft.com/downloads/details.aspx?FamilyId=6BE38633-7248-4532-929B-76E9C677E802&displaylang=en )
# Microsoft Office Outlook 2003 Service Pack 2 (SP2) or later versions

a few good articles ;
http://msexchangeteam.com/archive/2007/04/13/437745.aspx
http://www.msexchange.org/articles_tutorials/exchange-server-2007/management-administration/exchange-2007-sp1-mailbox-management-part1.html

Check info:

1.      Please add parameter “-verbose” at the end of the Import-Mailbox and reproduce the issue, which can give us more info to narrow down the cause
2.      Is there any related error or warning event in the application log on the both client and exchange server?
3.    Make sure the mailboxes has been exported on the same version Outlook as you use on your import machine

Troubleshooting:

1. Please make sure that outlook and any MAPI connections are closed prior to running the Import-Mailbox
2. Use outlook 2003 instead of outlook 2007 on the workstation if outlook is to remain open during the process
3. If using outlook 2007, ensure that outlook is logged in using the same credentials as the Import-Mailbox PowerShell window
4. Do not launch PowerShell under the “Run As” method. Instead log into Windows as the desired account with permission to the mailbox and launch PowerShell normally
5. If running Windows XP and getting the error: “PowerShell.EXE has encountered a problem and needs to close.  We are sorry for the inconvenience” – Make sure it dosent get connected to a READ-ONLY domain controller. It will not show up in the log of a XP computer, but trying the same on a Windows 7 and it will show that it connects several times during the import, but if it at one point hits a RODC, Powershell will crash. easy solution just add static entries for the domain to your hosts file.