Exchange

Microsoft Exchange Approval Assistant – Your message couldn’t be delivered because delivery to this address is restricted to authenticated senders

While not being able to accept or deny messages in hybrid scenario was solved in earlier post, now that people could approve posts they were getting an error message:

Microsoft Exchange Approval Assistant (MSExchApproval1f05a927-0000-0000-0000-00000000@domain.pl)
Your message couldn't be delivered because delivery to this address is restricted to authenticated senders. If the problem continues, please contact your email admin.

Diagnostic information for administrators:

Generating server: Exchange

MSExchApproval1f05a927-0000-0000-0000-00000000@domain.pl
Remote Server returned ‘550 5.7.134 RESOLVER.RST.SenderNotAuthenticatedForMailbox; authentication required; Delivery restriction check failed because the sender was not authenticated when sending to this mailbox'

Original message headers:

How can I fix this?

Is seems that for everything to work fine Azure AD Connect has to synchronize Microsoft Exchange System Objects with all the special Exchange mailboxes. If you've custom Azure AD Connect installation you may need to take a look if you've included that into sync.

But it didn't work? What now?

If that didn't help there is one more step that may need to be done. We need to cheat Exchange Online into sending approval messages to On-Premise Exchange. To do that we need to create Mail Contact on Office 365. For that you just need Display Name, Alias and Email Address. Only email address is required to be as is. Rest is up to you.

Please note that SMTP: in External email address will be added automatically by Exchange so you can skip it.

After that email approvals will work just fine. To be honest it's something I would expect to be really well documented or even automated process. Keep in mind you may need to give it some time for syncs to happen and be applied correctly.

This post was last modified on 20 sierpnia, 2018 14:43

Przemyslaw Klys

System Architect with over 14 years of experience in the IT field. Skilled, among others, in Active Directory, Microsoft Exchange and Office 365. Profoundly interested in PowerShell. Software geek.

Share
Published by
Przemyslaw Klys

Recent Posts

Active Directory Replication Summary to your Email or Microsoft Teams

Active Directory replication is a critical process that ensures the consistent and up-to-date state of…

2 tygodnie ago

Syncing Global Address List (GAL) to personal contacts and between Office 365 tenants with PowerShell

Hey there! Today, I wanted to introduce you to one of the small but excellent…

5 miesięcy ago

Active Directory Health Check using Microsoft Entra Connect Health Service

Active Directory (AD) is crucial in managing identities and resources within an organization. Ensuring its…

7 miesięcy ago

Seamless HTML Report Creation: Harness the Power of Markdown with PSWriteHTML PowerShell Module

In today's digital age, the ability to create compelling and informative HTML reports and documents…

8 miesięcy ago

How to Efficiently Remove Comments from Your PowerShell Script

As part of my daily development, I create lots of code that I subsequently comment…

9 miesięcy ago

Unlocking PowerShell Magic: Different Approach to Creating ‘Empty’ PSCustomObjects

Today I saw an article from Christian Ritter, "PowerShell: Creating an "empty" PSCustomObject" on X…

9 miesięcy ago