Fix Microsoft 365 SMTP Relay Error 4.5.3: Recipients Belong to Multiple Tenants
Question details
The user needs to resolve an SMTP relay failure where emails are rejected because the transaction includes recipients in different Microsoft 365 tenants.

- Product
- Microsoft 365 Exchange Online
- Device & OS
- not provided
- Scenario
- Sending an email message through Microsoft 365 SMTP relay (Port 25) that includes both external recipients (in the To field) and internal recipients (in BCC).
- Observed behavior
- The server rejects the email, returning an 'Insufficient system storage' error with the response code '4.5.3 Recipients belong to multiple tenants'.
Verify your organization's Exchange Online accepted domains and connectors, and ensure you have access to modify your application's SMTP sending logic.
Split the Message by Destination Tenant
Because Microsoft 365 SMTP direct relay natively restricts routing a single transaction across multiple tenants, separating the recipients into distinct messages is the most reliable resolution.
Exchange Online does not provide a tenant-level setting to override this security restriction for Port 25 direct send relays. The application generating the email must handle the recipient separation.
Access the source code or mail configuration panel of the application generating the email.
Configure your mailing script to process internal (your verified domain) and external (different tenant) recipients in separate arrays.
Set the application to trigger a distinct SMTP send request for the external 'To' recipients, and a completely separate SMTP request for the internal 'BCC' recipients.

Switch to SMTP Client Submission (Port 587)
If separating the messages is not feasible, using authenticated SMTP Client Submission bypasses the specific multi-tenant restrictions of Port 25 direct relays.
Implement a Third-Party Application Relay
A dedicated outbound third-party relay service can seamlessly handle complex cross-tenant routing without triggering Microsoft 365's specific direct-send restrictions.
Enhance Your Productivity with WPS Office
While resolving Exchange server configurations requires Microsoft 365 administrative access, you can handle all your daily document, spreadsheet, and presentation tasks seamlessly with WPS Office. It provides a lightweight, comprehensive productivity suite that requires no complex tenant configurations.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install the Software: Run the downloaded installation file and follow the simple on-screen instructions to set up the suite.
- 3. Open Your Documents: Launch WPS Office and immediately start opening, editing, and saving your existing Microsoft Office files without formatting loss.

Frequently Asked Questions
Why does Microsoft 365 block SMTP direct relay to multiple tenants?
Microsoft imposes this restriction on Port 25 unauthenticated direct routing to prevent spam, unauthorized spoofing, and abuse of its server infrastructure. Allowing a single transaction to cross tenant boundaries poses a security risk.
Can I fix Error 4.5.3 by adding the external domain to my Exchange accepted domains?
No. You can only add domains to your accepted domains list if your organization actively owns and controls them. Adding an external company's domain is not possible or permitted.
Does this multi-tenant error happen when sending emails normally from Outlook?
Generally, no. Error 4.5.3 typically occurs only during unauthenticated SMTP relay (using Port 25) from background applications, scanners, or servers. Standard user emails sent via Outlook use authenticated client submission protocols.
What is the difference between direct send and SMTP client submission?
Direct send uses Port 25 and IP authentication to send emails strictly to recipients within your own organization. SMTP client submission uses Port 587 with mailbox credentials, allowing emails to be routed to internal and external recipients.




