Security Policy Errors

How to Unblock a Restricted Email Address in Microsoft 365 Outlook

Muhammad Talha Sep 27, 2026 869 views

Question details

The user needs to unblock a Microsoft 365 email account that has been restricted from sending messages, likely due to suspected spam activity.

How to Unblock a Restricted Email Address in Microsoft 365 Outlook

Product: Microsoft 365
Device & OS: not provided
Scenario: A compromised or flagged Microsoft 365 account has been placed on the Restricted entities list, preventing it from successfully delivering outbound emails.
Observed behavior: The account can still sign in and send messages, but recipients do not receive them until a Microsoft 365 administrator removes the restriction.

Before you start

Ensure you have Global Administrator or Security Administrator privileges in Microsoft 365, as standard users cannot access the Defender portal to unblock restricted accounts.

Solution 1Recommended

Remove the User from the Restricted Entities List

Use Microsoft Defender for Office 365 to locate the flagged account and restore its outbound sending privileges.

When an account exceeds outbound sending limits or is suspected of sending spam, Microsoft automatically blocks it to protect your domain's reputation. Administrators must manually verify and unblock the account.

Sign in to Microsoft Defender

Go to the Microsoft 365 Defender portal (security.microsoft.com) and log in with your administrator credentials.

Navigate to Restricted Entities

On the left navigation pane, expand 'Email & collaboration', click on 'Review', and then select 'Restricted entities'.

Select the Blocked Account

Locate and click on the user account that has been restricted. A details flyout pane will appear on the right side of the screen.

Unblock the Account

Click the 'Unblock' action at the top of the flyout pane. Follow the on-screen wizard, review the security recommendations, and confirm the action.

Remove the User from the Restricted Entities List

Propagation Time: Once the account is unblocked, it may take up to 24 hours for the restrictions to be completely lifted and for normal mail flow to resume.

Solution 2

Secure the Compromised Account

Take immediate security measures to prevent the account from being hacked or restricted again.

Free Microsoft Office alternative

Discover a Free, Lightweight Alternative to Microsoft Office

While administrative email restrictions must be resolved through Microsoft 365 Defender, you don't need expensive subscription plans for your daily document tasks. WPS Office offers a free, lightweight suite that provides an excellent alternative for creating and editing your files.

1. Download the Software: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install WPS Office: Run the installer and follow the simple on-screen instructions to complete the setup process in minutes.
3. Open Your Documents: Launch WPS Office and directly open your existing Word, Excel, or PowerPoint files without losing any formatting.

Fully compatible with Microsoft Office formats including .docx, .xlsx, and .pptx.Free alternative for creating and managing professional documents without complex admin centers.Lightweight design ensuring fast startup even on older devices.Familiar user interface requiring zero learning curve for long-time Office users.

microsoft office alternative - wps office

Frequently Asked Questions

Why was my Microsoft 365 email address restricted?

Microsoft places accounts on the Restricted entities list if its automated systems detect the account sending outbound spam or exceeding sending limits, often as a result of the account being compromised by malicious actors.

Can a regular user unblock their own restricted email address?

No, regular users cannot unblock their own accounts. Only a Microsoft 365 administrator with the appropriate permissions, such as a Global Admin or Security Admin, can remove the restriction from the Defender portal.

How long does it take for emails to send normally after being unblocked?

After an administrator removes an account from the Restricted entities list, it typically takes anywhere from a few hours to up to 24 hours for the restrictions to fully propagate and for the user to send emails normally.

What should I do if the user cannot sign in at all to Microsoft 365?

If the account is completely locked out and sign-in fails, the administrator should check the Azure Active Directory sign-in logs to identify the error, reset the password, and contact Microsoft Support if the issue persists.

Microsoft Office Security Issues