exchange online how to know if mailbox user was blocked

Jack Chuong 436 Reputation points
2023-02-10T06:55:01.4933333+00:00

Hi all,
I suspect that 1 of my users has exceeded the limit - sent over 10000 messages a day and is blocked , how can I know for sure ? where can I find it ?

Exchange Online
Exchange Online
A Microsoft email and calendaring hosted service.
6,188 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 157.8K Reputation points MVP Volunteer Moderator
    2023-02-10T12:27:12.6966667+00:00
    1 person found this answer helpful.
    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. Jack Chuong 436 Reputation points
    2023-02-10T08:38:56.3833333+00:00

    I have used Message trace to search all message from my suspect user in 7 days , many messages have status "Failed" but trace results is not clear , as you can see below

    1

    The subject is blank , so I think , my user password is revealed (she has changed it) and her mailbox was used to send many spam messages (exceed 10000 message a day), but I want to know for sure and remaining time of blocking.

    1 person found this answer helpful.
    0 comments No comments

  2. Adrian Gallo 80 Reputation points
    2023-02-10T07:04:42.63+00:00

    You can check the message trace logs in the Exchange Admin Center to see if that user has exceeded the message send limit by following the steps below:

    1. Log in to the Exchange Admin Center (EAC) by going to https://outlook.com/admin and signing in with your admin credentials.
    2. In the EAC, go to the Mail flow > Message trace.
    3. You can select the date range for the trace logs you want to view on the message trace page and then click the search button.
    4. The message trace results will be displayed, and you can check for any blocked messages due to exceeding the message send limit.
    5. To filter the results, you can use the filter options on the right side of the screen, such as the result type, sender or recipient address, and message subject.

    The documentation I suggest that may help with your question also is as follows:

    Give it a go, and it will be great to hear your feedback.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.