logo
search
Send & Receive Issues

Fix Exchange Online User Still Blocked After Restricted Entities Removal

Camila MilosovichCamila Milosovich Sep 28, 2026 869 views

Question details

An Exchange Online user cannot send emails even after being removed from the Restricted entities list.

How to Fix Exchange Online User Still Blocked After Restricted Entities Removal
Product
Exchange Online
Device & OS
not provided
Scenario
An administrator has removed a blocked user account from the Restricted entities list to restore outbound email capabilities, but the unblocking process fails to take effect.
Observed behavior
The user remains blocked from sending email several hours after removal. Additionally, attempting to remove the block via PowerShell returns a transient database error.
Before you start

Ensure you have waited at least a few hours since removing the user from the Restricted entities list, as standard backend replication in Microsoft 365 can occasionally be delayed.

Solution 1Recommended

Submit a Service Request via Microsoft 365 Admin Center

Use this solution to engage Microsoft Support, as persistent blocking accompanied by PowerShell database errors requires backend intervention.

When removing an account from the Restricted entities list fails and returns transient database errors in PowerShell, the problem is beyond tenant-level administrative controls. The restriction likely involves deeper backend or account-level outbound spam mechanisms that Microsoft Support must inspect and clear manually.

1
Access the Admin Center

Open a web browser and log into the Microsoft 365 Admin Center (admin.microsoft.com) using your global administrator credentials.

2
Navigate to Help & Support

On the bottom right corner or the left-hand navigation pane, click on the 'Help & support' option to open the support assistant.

3
Open a Service Request

Type a brief description of the problem, specifically mentioning the 'transient database error' encountered in PowerShell. Proceed to create a new service ticket for the technical support team.

4
Contact your Reseller (If applicable)

If you purchased your Microsoft 365 subscription through a reseller or Cloud Solution Provider (CSP), contact them directly. They are authorized to escalate the backend unblocking request to Microsoft on your behalf.

Submit a Service Request via Microsoft 365 Admin Center
Expected Resolution Time: Once Microsoft Support clears the backend sync error or removes the account-level block, it may still take up to 24 hours for normal email sending capabilities to fully restore globally.
Free Microsoft Office alternative

Keep Productivity High with WPS Office

While waiting for Microsoft Support to resolve your Exchange Online server issues, ensure your daily documentation tasks are uninterrupted. WPS Office offers a free, lightweight, and highly compatible suite for your word processing, spreadsheet, and presentation needs.

  1. 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
  2. 2. Install the Software: Run the downloaded file and follow the on-screen instructions to complete the fast installation process.
  3. 3. Start Creating: Launch WPS Office to immediately open, edit, and save your existing Microsoft Office documents without any formatting loss.
Seamlessly compatible with Microsoft Office formats (DOCX, XLSX, PPTX).Free to use with a familiar, easy-to-navigate user interface.Lightweight installation ensures smooth performance even on older devices.Built-in PDF editing tools for comprehensive document management.
microsoft office alternative - wps office

Frequently Asked Questions

How long should it take for a user to be unblocked from Restricted Entities?

Typically, once a user is removed from the Restricted entities page in the Microsoft 365 Defender portal, the restriction is lifted within 1 to 24 hours depending on server replication.

What does a transient database error mean in Exchange Online PowerShell?

A transient database error generally indicates temporary communication or synchronization failures between Microsoft's backend server clusters. It means the system could not execute your command at that specific moment.

How can I check if a user is on the Restricted entities list?

Go to the Microsoft 365 Defender portal, navigate to 'Email & collaboration', click on 'Review', and select 'Restricted entities'. This page displays all accounts currently blocked from sending outbound emails.