Account Locked & Blocked

Fix Microsoft 365 Email Account Still Locked After Security Restriction Removal

Maira Mehtab Sep 21, 2026 868 views

Question details

The user's email account remains suspended and unable to send or receive messages despite successfully resetting the password and removing the account from the restricted list.

Product: Microsoft 365 Email / Exchange Online
Device & OS: not provided
Scenario: Attempting to send or receive emails after recovering an account from a suspicious activity suspension.
Observed behavior: The email account remains blocked from sending and receiving mail despite the administrator removing it from the restricted entities list.

Before you start

Ensure you have global administrator access to your organization's Microsoft 365 portal, as resolving lingering backend email restrictions requires administrative privileges.

Solution 1Recommended

Allow Propagation Time and Verify Defender Settings

Security changes in Microsoft 365 can take time to apply across all backend servers. You should wait for sync and verify that no lingering blocks remain in Exchange Online Protection.

When an account is flagged for suspicious activity and placed on the restricted users list, removing it does not yield immediate results. The Microsoft 365 ecosystem requires propagation time to clear the block across all Exchange servers.

Wait for system synchronization

Allow up to 24 hours for the password reset and restriction removal to fully propagate through the Microsoft 365 system before attempting to send new emails.

Check Microsoft 365 Defender

Review Restricted Entities

Navigate to 'Email & Collaboration' > 'Review' > 'Restricted entities' to ensure the user's email address is genuinely removed from the blocked list and no duplicate blocks exist.

Check Exchange Admin Center

Open the Exchange admin center, locate the user's mailbox settings, and verify that mail flow rules are not actively blocking outbound or inbound messages.

Standard Propagation Delays: Even after successfully removing a block, it typically takes between 1 to 24 hours for the user to regain full email sending and receiving capabilities.

Solution 2

Contact Microsoft Support for Backend Unblocking

If the account remains locked after the 24-hour propagation window, backend intervention by Microsoft engineers is required.

Free Microsoft Office alternative

Experience Seamless Document Editing with WPS Office

While you wait for your Microsoft 365 email issues to be resolved, you can rely on WPS Office for all your document, spreadsheet, and presentation needs. It is a lightweight, fully compatible, and free alternative to Microsoft Office that works completely independently of your Microsoft 365 account status.

1. Download the installer: Visit the official WPS Office website and click the free download button for your operating system.
2. Install the software: Run the downloaded installer and follow the quick on-screen prompts to set up WPS Office on your device.
3. Open and edit Microsoft formats: Launch WPS Office and directly open any existing .docx, .xlsx, or .pptx files to continue working seamlessly.

Highly compatible with Microsoft Word, Excel, and PowerPoint formats.Lightweight software that installs quickly and runs smoothly on PC, Mac, and mobile.No mandatory cloud subscriptions required for offline document editing.Familiar user interface allowing for a seamless migration from Microsoft Office.

microsoft office alternative - wps office

Frequently Asked Questions

How long does it take for an email account to be unblocked in Microsoft 365?

After an administrator removes an account from the restricted users list, it can take anywhere from 1 to 24 hours for the backend changes to take effect and for the user to resume sending and receiving emails.

Why was my Microsoft 365 email account suspended for suspicious activity?

Email accounts are automatically suspended by Exchange Online Protection when the system detects unusual patterns, such as sending bulk spam, setting up suspicious auto-forwarding rules, or exhibiting signs of a compromised password.

Can I remove my own email account from the restricted list?

No. Standard end-users cannot lift security blocks. Only an administrator with the appropriate global or security privileges in Microsoft 365 Defender can remove an account from the restricted entities list.

What should I do if the restricted users page doesn't show the blocked account?

If the account is no longer on the restricted list but is still unable to send email after 24 hours, it is likely experiencing a backend synchronization error. The global administrator must open a support ticket with Microsoft to resolve it.

Login & Account Issues