Self-help diagnostics for issues in Exchange Online and Outlook

It's vital that administrators be able to diagnose and resolve issues quickly in Exchange Online and Outlook. To support this effort, the Exchange and Outlook support teams have released some new features in the Microsoft 365 admin center.

Currently, we provide diagnostics through text analytics. It's important to note that while these diagnostics can't make automatic changes to your tenant without your consent, they do offer insights into known issues, and provide instructions to fix those issues quickly. We also want to make it easier for you to find our diagnostics within the current experience. Therefore, we have created a new set of queries to help administrators.

Note

These diagnostics aren't available for the GCC High or DoD environments, or for Microsoft 365 operated by 21Vianet.

Example for an Exchange Online issue Example for an Outlook issue
Screenshot of the diagnostics for an Exchange Online issue. Screenshot of the diagnostics for an Outlook issue.

When IT admins run customer diagnostics in the Microsoft 365 admin center to resolve issues without logging support requests, Microsoft will make donations to global nonprofit organizations.

For more information, see Diagnostics for Social Good.

What scenarios are currently covered?

Several diagnostics currently cover the various areas within Exchange Online and Outlook. Each diagnostic is listed below together with a brief description of its function and shortcut command.

Diagnostic Description Shortcut Link Support article
Migration Exchange Web Services (EWS) throttling policy Verify that the EWS throttling policy isn't too restrictive for a mailbox data migration that uses third-party tools. (Doesn't apply to Microsoft tools for Hybrid, IMAP, G Suite, or Public Folder migrations.) Run Tests: EWS Throttling
Exchange Online Accepted Domain diagnostics Check if a domain is correctly configured as an Exchange Online accepted domain. Run Tests: Exchange accepted domains "You can't use the domain because it's not an accepted domain for your organization" error
Test a user's Exchange Online RBAC permissions If a user has issues running a specific PowerShell cmdlet or command, or gets an error indicating that they don't have the correct roles or permissions, run this diagnostic to check whether the user has permissions to run the cmdlet and the specific parameter. Run Tests: EXO RBAC test user
Compare Exchange Online RBAC permissions for two users If one user has issues running a specific PowerShell cmdlet or command, or gets an error indicating that they don't have the correct roles or permissions, while another user doesn't have these problems, run this diagnostic to compare the RBAC roles of the two users. Run Tests: EXO RBAC compare users
Recipient failure Check the state of an Exchange Online recipient and resolve common issues. Run Tests: EXO Recipient Object Failures Delays in provisioning of user/mailbox or synchronizing changes in Exchange Online
Exchange Organization Object check Check health and resolve issues related to your Exchange Online organization object. For example, Exchange Online tenant provisioning or RBAC-related issues (various commands aren't available even though users have permissions). Run Tests: Exchange organization object
Mailbox or message size Check the size of a mailbox or the size of messages (including attachments). Run Tests: Mailbox Size Increase or customize Exchange Online mailbox size
Deleted mailbox diagnostics Check the state of recently deleted mailboxes. Run Tests: Deleted Mailbox Delete or restore user mailboxes in Exchange Online
Exchange Remote PowerShell throttling policy Update the Exchange Remote PowerShell throttling policy for the tenant. Run Tests: PowerShell Throttling
Email delivery troubleshooter Check whether email messages are successfully delivered. Run Tests: Email Delivery Find and fix email delivery issues
Outlook user connectivity diagnostics Diagnose Outlook connectivity issues for users by running several checks on possible service-side settings (root causes) so that a tenant admin can quickly fix the issues without involving the users. Run Tests: Outlook User Connectivity Fix Outlook connectivity issue
Non-delivery report (NDR) diagnostics Provide additional information about NDRs that are received through email messages. Run Tests: Email NDR Email non-delivery reports in Exchange Online
Archive mailbox diagnostics Check and identify issues about mailbox archiving. Run Tests: Archive Mailbox Enable archive mailboxes in the Microsoft Purview compliance portal
Outlook user password prompt diagnostics Diagnose Outlook password prompt issues for users by running several checks on possible service-side settings (root causes) so that a tenant admin can quickly fix the issues without involving the users. Run Tests: Outlook Password Prompt Fix Outlook password prompt issue
Retention policy diagnostics for a user mailbox Check retention policy settings on a user mailbox. Run Tests: Retention Policy on a user mailbox Retention tags and retention policies in Exchange Online
DomainKeys Identified Mail (DKIM) diagnostics Validate that DKIM signing is configured correctly and the correct DNS entries have been published. Run Tests: DKIM Use DKIM to validate outbound email sent from your custom domain
Compromised Account diagnostics Identify suspicious activities against an account and return information that can be used to recover the account if compromised. Run Tests: Compromised Account Responding to a compromised email account

Still need help? Go to Microsoft Community.