How to Fix Exchange Online IP Allow List Addresses Disappearing
Question details
Users need to resolve an issue where IP addresses added to an Exchange Online connection filter policy disappear after being saved.
- Product
- Exchange Online
- Device & OS
- not provided
- Scenario
- Administrators are attempting to add IP addresses to the allowed list using PowerShell or the administration center but are encountering persistence failures or 'Access Denied' errors.
- Observed behavior
- The added IP addresses fail to save and disappear from the policy. Additionally, cmdlets like Add-IPAllowListEntry may not be recognized, or the PowerShell session returns 'Access Denied' despite Global Administrator privileges.
Verify that your administrator account possesses the necessary Exchange permissions and has a licensed mailbox, as Global Administrator access alone may not be sufficient for these PowerShell cmdlets.
Use the Supported Exchange Online PowerShell Module
Connect using the correct Exchange Online PowerShell module with appropriate permissions to successfully add and save IP addresses.
Using incorrect connection methods or outdated modules can result in unrecognized cmdlets or changes that fail to save. Connecting properly via the EXOPSSession ensures your policy modifications are persistent.
Close any active PowerShell windows to ensure previous, conflicting sessions or modules are cleared.
Sign in to the Exchange admin center using Microsoft Edge, then navigate to the Hybrid option.
Download and install the specific Exchange Online PowerShell module recommended in the Hybrid section.
Open the newly installed PowerShell module and connect by running: Connect-EXOPSSession -UserPrincipalName youraccount@domain.com
Use the appropriate cmdlet to add your IP address to the allow list. For example: Add-IPAllowListEntry -IPAddress 192.168.0.100
Add the IP Address via the Microsoft 365 Defender Portal
If PowerShell issues persist due to module conflicts, you can bypass the command line and add the IP address directly through the web interface.
Enhance Your Productivity with WPS Office
While you are managing backend IT configurations like Exchange Online policies, you can rely on WPS Office for a seamless daily document workflow. WPS Office provides a lightweight, highly compatible, and user-friendly alternative to Microsoft Office applications.
- 1. Download WPS Office: Visit the official WPS website and download the free installer for your operating system.
- 2. Install the application: Run the installer and follow the simple on-screen instructions to set up the suite.
- 3. Open your files: Launch WPS Office and instantly open your existing Microsoft Office documents without format loss.
Frequently Asked Questions
Why do I get an 'Access Denied' error when running New-PSSession in Exchange Online?
This usually occurs if your account is assigned the Global Administrator role but does not have a licensed Exchange mailbox, or if it lacks the specific Exchange administrative permissions required to establish the remote PowerShell session.
Why is the Add-IPAllowListEntry cmdlet not recognized in PowerShell?
The cmdlet will not be recognized if the correct Exchange Online PowerShell module is not imported or if the connection was established using an unsupported method. Ensure you connect using Connect-EXOPSSession instead of standard PowerShell remoting.
Can I modify the IP Allow list without using PowerShell?
Yes, you can manage the IP Allow list directly through the Microsoft 365 Defender portal by editing the Connection filter policy under the Anti-spam settings.
