email not working

Question

my domain is compromise , i cant access my organisation's all email id

---

Moved from: Microsoft 365 and Office | Subscription, account, billing | Other | Other

Answer 1

Hello @maple IT

Welcome to Q&A forum!To ensure I fully understand the issue you’re experiencing, I’d like to confirm a few details:

1/ Verify your account type

I would like to reconfirm your account type to ensure we can provide the most appropriate troubleshooting steps. Please let me know which of the following applies to your account:

• Personal account (e.g., @hotmail.com, @outlook.com)
• Educational account (e.g., @schoolname.edu)
• Business account (e.g., @yourcompany.com or @onmicrosoft.com)

2/ About domain compromise, might I have more information about it?

Clarifying this can help me understand your situation better.

3/ Do you see any error message?

Please provide the full error message you are encountering so we can investigate further. You can take a screenshot of this error.

4/ Is any other member in your company also encountering this issue?

If so, it might be related to your organization’s settings, and you may need to reach out to your IT Admin to verify.

“My questions help identify issues, and while answering, you may discover the root cause of the problem you are facing along the way.”

Looking forward to hearing from you.

---

If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in "our documentation" to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

BUT its showing this account is not available

Answer 3

If your domain is compromised and you cannot access your organization's email accounts, it is crucial to take immediate action to secure your accounts and restore access. Here are some steps you can follow:

1. Identify Symptoms of Compromise: Look for signs that your email accounts may have been compromised, such as blocked mailboxes, suspicious activity (like missing emails), or unauthorized changes to account settings.
2. Secure Your Accounts: Use PowerShell commands to revoke user access and secure the accounts. For example, you can run the command Revoke-MgUserSignInSession -UserId <your-email> to revoke access for a specific user.
3. Review MFA Devices: Check the Multi-Factor Authentication (MFA) settings for affected users and remove any suspicious devices or methods.
4. Investigate Mail Forwarding: Look for any unauthorized mailbox forwarding rules that may have been set up by an attacker and remove them.
5. Audit Logs: Use the Microsoft Entra admin center and the Defender portal to review audit logs for any suspicious sign-in activity.
6. Contact Support: If you are unable to resolve the issue, consider reaching out to Microsoft support for assistance in regaining control of your domain and email accounts.

Taking these steps can help you regain access and secure your organization's email accounts from further compromise.

---

References:

• Respond to a compromised cloud email account
• Secure and Restore Email Function to a Compromised Microsoft 365 Mail Enabled Account