Security Policy Errors

Why a Blocked Microsoft 365 User Is Missing from the Restricted Users List

Steve KSteve K Nov 13, 2026 869 views

Question details

A Microsoft 365 user is blocked from sending email, but the account does not appear in the Restricted users list or in PowerShell results. The user needs to understand why this happens and how to verify or resolve the temporary outbound spam policy restriction.

Why a Blocked Microsoft 365 User Is Missing from the Restricted Users List
Product
Microsoft 365 / Exchange Online
Device & OS
not provided
Scenario
The administrator is investigating a sender that has been blocked from sending outbound email and needs to locate the user in the Restricted users list or via PowerShell.
Observed behavior
The blocked user is not listed in the Restricted users page or PowerShell results even though outbound email is blocked, which can happen when the default outbound spam policy imposes a temporary sending restriction after a threshold is exceeded.
Before you start

Confirm you have Microsoft 365 administrator access to the Microsoft 365 Defender portal at security.microsoft.com or the Exchange admin center, and note the blocked user's sign-in address and the approximate time the sending block began.

Solution 1Recommended

Check the default outbound spam policy for a temporary sending restriction

Use this check first when a blocked sender is missing from the Restricted users list; the default policy often applies a temporary UTC-based block without listing the user.

The default outbound spam policy in Microsoft 365 can silently restrict outbound sending after a user exceeds message, recipient, or suspicious email thresholds. This temporary restriction is separate from the manually listed Restricted users and is usually released automatically the following day based on UTC.

1
Open the Microsoft 365 Defender portal

Sign in at security.microsoft.com with an administrator account that has permission to view threat policies.

2
Go to anti-spam policies

Navigate to Email & collaboration > Policies & rules > Threat policies > Anti-spam in the left menu.

3
Open the outbound spam filter policy

Select the default outbound spam filter policy, usually named Default, and review the sending limits and action settings.

4
Compare the user's sending activity to the policy threshold

Check the user's recent outbound mail volume, recipient count, or suspicious email pattern. Exceeding the threshold triggers a temporary block until the following day based on UTC time.

Check the default outbound spam policy for a temporary sending restriction
Temporary restriction: The default outbound spam policy restriction is temporary and normally does not require administrator action because it releases the following day based on UTC.
Free Microsoft Office alternative

Use WPS Office as a Free Alternative to Microsoft 365 for Everyday Document Work

When Microsoft 365 admin policies and outbound restrictions interrupt your work, WPS Office gives you a free, lightweight office suite that opens Word, Excel, and PowerPoint files with a familiar interface, so you can keep creating and sharing documents without a Microsoft 365 subscription.

  1. 1. Download WPS Office: Go to the official WPS Office website and click Download WPS Office Free for Windows, macOS, Linux, iOS, or Android.
  2. 2. Open your existing Office files: Launch WPS Writer, WPS Spreadsheets, or WPS Presentation and open .docx, .xlsx, or .pptx files with formatting intact.
  3. 3. Create and share documents: Edit your file, then save it in Microsoft Office format or export it as PDF to attach to email or share with others.
Free to download and use for home, student, and everyday office tasksOpens and saves Word, Excel, and PowerPoint file formats for seamless compatibilityLightweight and fast compared with larger Microsoft 365 installationsFamiliar ribbon-style interface reduces the learning curve when switchingKeep making and sharing email attachments without waiting on Microsoft 365 service restrictions
microsoft office alternative - wps office

Frequently Asked Questions

Why is a blocked Microsoft 365 user missing from the Restricted users list?

Because the default outbound spam policy may have applied a temporary sending restriction. This block usually lasts until the following day based on UTC and may not create a Restricted users list entry.

How long does the temporary outbound spam block last?

It normally lifts the following day based on UTC time. The temporary policy restriction cannot be manually overridden; removal from Restricted users only applies when the user is actually listed.

Where do I check the outbound spam policy in Microsoft 365?

Sign in to the Microsoft 365 Defender portal, go to Email & collaboration > Policies & rules > Threat policies > Anti-spam, and open the outbound spam filter policy to review sending limits.

Can I remove a user from Restricted users if the account is not listed?

No. If the account is not listed, there is no restricted-user entry to remove. Wait for the temporary restriction to expire or correct the outbound policy and recheck.

Does WPS Office replace Microsoft 365 for document editing?

WPS Office is a free alternative for creating and editing Word, Excel, PowerPoint, and PDF files with high compatibility, but it does not manage Microsoft 365 admin or security policies such as outbound spam restrictions.