Fix issues with printers, scanners, and LOB applications that send email using Office 365

Fix issues with printers, scanners, and LOB applications that send email using Office 365

Email clients provide actionable error messages when something goes wrong. Sending email from devices and applications is less easy to fix, and you might not get clear information to help you. This article can help you troubleshoot, and it uses printer configurations as examples.

As a first step to fixing any problems, check your configuration. See How to set up a multifunction device or application to send email using Office 365 for detailed information about the configuration options.

My printer is already configured for email, but I don't know which configuration option it uses

Below are the three configuration options to help you identify which one is in use:

1. SMTP client submission (recommended)

  • Your printer is connected to the Office 365 server "smtp.office365.com."

  • You entered an email address and password for the printer mailbox.

  • The printer can send email to people inside and outside your organization.

Shows how a multifunction printer connects to Office 365 using SMTP client submission.

2. Direct send

  • Your printer is connected to an Office 365 server whose name ends with "mail.protection.outlook.com."

  • There is no connector set up in Office 365 for emails sent from your organization's network.

  • The printer can send email only to people in your organization; email can't be sent to recipients outside your organization.

Shows how a multifunction printer uses your Office 365 MX endpoint to send email directly to recipients in your organization only.

3. Office 365 SMTP relay

  • Your printer is connected to an Office 365 server whose name ends with "mail.protection.outlook.com."

  • There is a connector set up in Office 365 for emails sent from your organization's network to Office 365.

  • The printer can send email to people inside and outside your organization.

Shows how a multifunction printer connects to Office 365 using SMTP relay.

Fix issues with SMTP client submission

I set up my printer for SMTP client submission, but it still can't send emails

  1. Check the settings entered directly into the printer:
Printer settingValue
:-----:-----
Server/smart host 
smtp.office365.com 
Port 
Port 587 (recommended) or port 25 
TLS/ StartTLS 
Enabled 
Username/email address and password 
Login credentials of Office 365 mailbox the printer uses 
  1. If your printer didn't require a password for the email address you entered, your printer is trying to send emails without logging on to Office 365. SMTP client submission requires your printer to log on to Office 365. Direct send and Office 365 SMTP relay do not require a logon; consider one of these options instead.

  2. Your printer or application must send email from the same address that you entered logon credentials for during email setup. If the printer or application tries to send email from a different account, this results in an error similar to:

    5.7.60 SMTP; Client does not have permissions to send as this sender.

    For example, if you entered login credentials for username@domain.com in your application settings, but the application tries to send emails from scanner@domain.com, this is not supported. For this scenario, use Office 365 SMTP relay instead.

  3. Test the user name and password by logging on to Outlook on the web, and try to send a test email to make sure the account is not blocked. If the user is blocked, you can find help in the article, Removing a user, domain, or IP address from a block list after sending spam email.

  4. Next, test that you can connect to Office 365 from your network by doing the following:

  5. Follow the instructions to install the Telnet Client tool on a computer on the same network as the device or application.

  6. Run the tool from the command line by typing telnet.

  7. Type open smtp.office365.com 587 (or substitute 25 for 587 if you are using that port setting instead).

  8. If you connected successfully to an Office 365 server, expect to receive a response line similar to this:

    220 BY1PR10CA0041.outlook.office365.com Microsoft ESMTP MAIL Service ready at Mon, 1 Jun 2015 12:00:00 +0000

  9. If you can't connect to Office 365, your network firewall or Internet Service Provider (IDP) might have blocked port 587 or 25. Correct this so you can send email from your printer.

  10. If none of these issues applies to your device, it might not meet requirements for Transport Layer Security (TLS) encryption. Your device must support TLS version 1.0 or above. Update the firmware on the device to solve this, or try one of the other configuration options where TLS is optional.

    For more information about TLS, see How Exchange Online uses TLS to secure email connections in Office 365 and for detailed technical information about how Exchange Online uses TLS with cipher suite ordering, see Enhancing mail flow security for Exchange Online.

I receive an authentication error when my device tries to send email

This can be caused by a number of issues:

  1. Make sure that you entered the correct user name and password.

  2. Try logging into OWA with the printer's user name and password. Send an email to make sure that the mailbox is active and has not been blocked for sending spam.

  3. Check that your device or application supports TLS version 1.0 or above. The best way to check is by upgrading the firmware on the device or updating the application you're sending email from to the latest version. Contact your device manufacturer to confirm that it supports TLS version 1.0 or above.

Error: 5.7.60 SMTP; Client does not have permissions to send as this sender

This error indicates that the device is trying to send an email from an address that doesn't match the logon credentials. An example would be if your entered login credentials for username@doamin.com in your application settings but the application tries to send emails from scanner@domain.com If your application or printer behaves this way, use Office 365 SMTP relay because SMTP client submission does not support this scenario.

Error: Client was not authenticated to send anonymous mail during MAIL FROM

This error indicates that your printer connects to the SMTP client submission endpoint (smtp.office365.com). However, your printer must also logon to a mailbox to send a message. This error occurs when you have not entered mailbox logon credentials in the printer's settings. If there is no option to enter credentials, this printer does not support SMTP client submission; use either direct send or Office 365 SMTP relay instead. See How to set up a multifunction device or application to send email using Office 365.

Error: 550 5.1.8 Bad outbound sender

This error indicates that the device is trying to send an email from an Office 365 mailbox that is on a spam block list. For help, see Removing a user, domain, or IP address from a block list after sending spam email.

Fix issues with direct send

I set up my printer for direct send and it's not sending email - or - My device was sending email using direct send, but it stopped working

This can be caused by a number of issues.

  1. A common reason for issues with direct send is a blocked IP address. If antispam tools detect outbound spam from your organization, your IP address can be blocked by a spam block list. Check whether your IP address is on a block list by using a third-party service, such as MXToolbox or WhatIsMyIPAddress. Follow up with the organization that added your IP address to their block list. Office 365 uses block lists to protect our service. For help, see Removing a user, domain, or IP address from a block list after sending spam email.

  2. To rule out a problem with your device, send a test email to check your connection to Office 365. To send a test email, follow these steps in the article, Use Telnet to Test SMTP Communication. If you can't connect to Office 365, your network or ISP might have blocked communication using port 25. If you can't reverse this, use SMTP client submission instead.

Error: Client was not authenticated to send anonymous mail during MAIL FROM

This indicates that you are connecting to the SMTP client submission endpoint (smtp.office365.com), which can't be used for direct send. For direct send, use the MX endpoint for your Office 365 tenant, which ends with "mail.protection.outlook.com." You can find your MX endpoint by following the steps in Option 2: Send mail directly from your printer or application to Office 365 (direct send).

My emails are not sent to recipients who are not in my organization

This is by design. Direct send allows email to be sent only to recipients in your organization that are hosted in Office 365. If you need to send to external recipients, use SMTP client submission or Office 365 SMTP relay.

The MX endpoint is too long for the printer setting box. Can I use an IP address instead?

It's not possible to use an IP address in place of an MX endpoint. This could result in your not being able to send messages in the future. If the MX endpoint is too long, consider using SMTP client submission, which has a shorter endpoint (smtp.office365.com).

Emails from my device are marked as junk by Office 365

For direct send, we recommend using a device that sends from a static IP address. This allows you to set up a Sender Policy Framework (SPF) record to help prevent emails being marked as spam. Check that your SPF record is set up with your static IP address. A network or ISP change could change your static IP address. Update your SPF record to reflect this change. If you aren't sending from your own static IP address, consider SMTP client submission instead.

Fix issues with Office 365 SMTP relay

I set up my printer for Office 365 SMTP relay but it's not sending email -or- My device was sending email using SMTP relay, but it stopped working

This can be caused by a number of issues.

  1. A common reason for issues with Office 365 SMTP relay is a blocked IP address. If antispam tools detect outbound spam from your organization, your IP address can be blocked by a spam block list. Check whether your IP address is on a block list by using a third-party service, such as MXToolbox or WhatIsMyIPAddress. Follow up with the organization that added your IP address to their block list. Office 365 uses block lists to protect our service. For help, see Removing a user, domain, or IP address from a block list after sending spam email.

  2. To rule out a problem with your device, send a test email to check your connection to Office 365. To send a test email, follow these steps in the article, Use Telnet to Test SMTP Communication. If you can't connect to Office 365, your network or ISP might have blocked communication using port 25. If you can't reverse this, use SMTP client submission instead.

Emails are no longer being sent to external recipients

Network or ISP changes might change your static IP address. This results in your connector not identifying and relaying your messages to external recipients. Update your connector and your SPF record with the new IP address. Follow the steps in Option 3: Configure a connector to send mail using Office 365 SMTP relay to edit your existing connector settings.

Emails from my device are marked as junk by Office 365

Office 365 SMTP relay requires your device to send email from a static IP address. Check that your SPF record is set up with your static IP address. A network or ISP change could change your static IP address. Update your SPF record to reflect this change. If you aren't sending from your own static IP address, consider SMTP client submission instead.


    • Related Articles

    • How to set up a multi-function device or application to send email using Office 365

      From September 1st, 2018, Office 365 is slowly rolling out changes to SMTP client submission (also known as SMTP Authenticated Submission) which may affect your devices and applications that send emails. To find out more, visit the KB ...
    • How to configure IIS for relay with Office 365

      When you set up a multifunction device or application to send email through Office 365, there are some cases where the device or application can't connect directly to Office 365. In these cases, you need to set up Internet Information Services (IIS) ...
    • Scanning to Office 365 via an MFD (Multi-functional Device)

      Datasharp supply managed print & IT Services through the UK to business small and large. Visit Datasharp for your Print and IT Service requirements. Below is a guide form Microsoft on setting up an MFD to scann from the Office365 platform. ...
    • Gmail - Scan to email no longer working

      Datasharp supply managed print & IT Services through the UK to business small and large. Visit Datasharp for your Print and IT Service requirements. We have been hearing from confused clients that as of today 08/06/2022 they can't use Gmail for their ...
    • Konica scan to office 365

      Konica Minolta Bizhub relay through Office 365 you need to complete the following. Log on to the Konica Minolta Bizhub device administration page. Log in as an administrator. Go to the Network tab. Go to the Email Settings tab. Go to the Email TX ...