Security Policy Errors

How to Fix Cannot Enable External Email Forwarding in Exchange Online

Chanuka Geekiyanage Oct 8, 2026 868 views

Question details

The user is unable to enable automatic external email forwarding in the outbound spam policy due to a parameter error.

Fix: Cannot Enable External Email Forwarding in Exchange Online

Product: Exchange Online
Device & OS: not provided
Scenario: Modifying an outbound spam filter policy to allow automatic email forwarding to external domains.
Observed behavior: The system returns an error stating that the AutoForwardingMode parameter is unavailable in the current role definition, even when using highly privileged administrator accounts.

Before you start

Ensure you are logged into Exchange Online PowerShell using an account with Global Administrator or Exchange Administrator privileges, and that the ExchangeOnlineManagement module is fully up to date.

Solution 1Recommended

Run Enable-OrganizationCustomization and Update Role Permissions

Hydrate your Exchange Online tenant to allow custom security policy modifications and ensure the correct management roles are assigned for the Set-HostedOutboundSpamFilterPolicy cmdlet.

In Microsoft 365, new tenants are often created in a 'dehydrated' state to save space. This limits the ability to modify default configurations. Running Enable-OrganizationCustomization resolves this by fully initializing the tenant for customized security policies.

Connect to Exchange Online PowerShell

Open PowerShell as an administrator and run 'Connect-ExchangeOnline' to sign in with your Microsoft 365 administrator credentials.

Enable organization customization

Execute the command 'Enable-OrganizationCustomization'. If your tenant is already customized, PowerShell will return a message stating it is already enabled.

Verify required management roles

Ensure your administrator account belongs to the 'Organization Management' or 'Security Administrator' role groups in the Microsoft 365 Defender portal.

Reconnect and apply changes

Disconnect your current PowerShell session using 'Disconnect-ExchangeOnline', wait a few minutes, and reconnect to refresh your active permissions.

Update the outbound spam filter policy

Run the correct cmdlet 'Set-HostedOutboundSpamFilterPolicy' (instead of Set-OutboundSpamFilterPolicy) with the '-AutoForwardingMode' parameter to enable external forwarding.

Propagation Delay: After running Enable-OrganizationCustomization, it may take several hours (up to 24 hours in rare cases) for the changes to fully propagate across the Microsoft Exchange Online environment.

Free Microsoft Office alternative

Looking for a Lightweight Alternative to Microsoft Office?

While resolving Exchange Server routing errors requires Microsoft admin tools, your daily document and spreadsheet tasks don't have to rely on expensive licenses. WPS Office provides a lightweight, highly compatible alternative for everyday productivity.

1. Download the installer: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install WPS Office: Run the downloaded installer file and follow the simple on-screen instructions to set up the software.
3. Start creating documents: Open WPS Office and instantly create or edit your existing Microsoft Office files with full format compatibility.

Highly compatible with Microsoft Word, Excel, and PowerPoint document formatsLightweight installation with extremely fast startup timesFree to use for essential document creation, editing, and sharingFamiliar user interface that requires zero learning curve

microsoft office alternative - wps office

Frequently Asked Questions

Why does Set-OutboundSpamFilterPolicy return a command-not-found error?

This specific cmdlet may be deprecated or restricted in your current Exchange Online Management module. Microsoft recommends using Set-HostedOutboundSpamFilterPolicy for managing these settings in modern environments.

What is the purpose of the AutoForwardingMode parameter?

The AutoForwardingMode parameter in the outbound spam filter policy dictates whether users in your organization are allowed to automatically forward emails to external recipient addresses.

What should I do if the parameter is still unavailable after organization customization?

If you have verified your administrator permissions and allowed enough time for customization propagation but still receive the error, you should contact Microsoft Support to manually investigate your tenant's backend provisioning.

Microsoft Office Security Issues