

Use Exchange Online PowerShell to enable or disable SMTP AUTH on multiple mailboxes This example disables SMTP AUTH for mailbox Set-CASMailbox -Identity -SmtpClientAuthenticationDisabled $true This example enables SMTP AUTH for mailbox Set-CASMailbox -Identity -SmtpClientAuthenticationDisabled $false The mailbox setting takes precedence over the organization setting.

You use the values $true (disabled) or $false (enabled) to override the organization setting. The value $null indicates the setting for the mailbox is controlled by the global setting on the organization. Use the following syntax: Set-CASMailbox -Identity -SmtpClientAuthenticationDisabled Use Exchange Online PowerShell to enable or disable SMTP AUTH on specific mailboxes

When you're finished, click Save changes. Verify the Authenticated SMTP setting: unchecked = disabled, checked = enabled. In the Email apps section, click Manage email apps. Select the user, and in the flyout that appears, click Mail. Open the Microsoft 365 admin center and go to Users > Active users. Use the Microsoft 365 admin center to enable or disable SMTP AUTH on specific mailboxes The per-mailbox setting to enable (or disable) SMTP AUTH is available in the Microsoft 365 admin center or Exchange Online PowerShell. To verify that you've globally disabled SMTP AUTH in your organization, run the following command and verify that the value of the SmtpClientAuthenticationDisabled property is True: Get-TransportConfig | Format-List SmtpClientAuthenticationDisabled Note: To enable SMTP AUTH if it's already disabled, use the value $false. To disable SMTP AUTH globally in your organization with PowerShell, run the following command: Set-TransportConfig -SmtpClientAuthenticationDisabled $true To disable SMTP AUTH globally in your organization in the new EAC, go to the Mail Flow settings page under Settings and toggle the setting labeled "Turn off SMTP AUTH protocol for your organization" You can disable (or enable) SMTP AUTH globally for your organization in the new EAC or by using Exchange Online PowerShell. For more information, see Disable Basic authentication in Exchange Online. If your authentication policy disables basic authentication for SMTP, clients cannot use the SMTP AUTH protocol even if you enable the settings outlined in this article.For more information, see What are security defaults?. If security defaults is enabled in your organization, SMTP AUTH is already disabled in Exchange Online.Note that these settings only apply to mailboxes that are hosted in Exchange Online (Office 365 or Microsoft 365). A per-mailbox setting that overrides the tenant-wide setting.An organization-wide setting to disable (or enable) SMTP AUTH.

There are two settings that can help you do this: Therefore, we highly recommend that you disable SMTP AUTH in your Exchange Online organization, and enable it only for the accounts (that is, mailboxes) that still require it. Virtually all modern email clients that connect to Exchange Online mailboxes in Office 365 or Microsoft 365 (for example, Outlook, Outlook on the web, iOS Mail, Outlook for iOS and Android, etc.) don't use SMTP AUTH to send email messages. For more information, see Authenticate an IMAP, POP or SMTP connection using OAuth. SMTP AUTH supports modern authentication (Modern Auth) through OAuth in addition to basic authentication. The SMTP AUTH protocol is used for SMTP client email submissions, typically on TCP port 587. Applications, reporting servers, and multifunction devices that generate and send email messages.These protocols only allow clients to receive email messages, so they need to use authenticated SMTP to send email messages. SMTP client email submissions (also known as authenticated SMTP submissions or SMTP AUTH) are used in the following scenarios in Office 365 and Microsoft 365: Find features that are not yet there in new EAC at Other Features or use Global Search that will help you navigate across new EAC. While most of the features have been migrated to new EAC, some have been migrated to other admin centers and remaining ones will soon be migrated to New EAC. Microsoft recommends using the new Exchange Admin Center, if not already doing so. Effective from December 2022, the classic Exchange Admin Center will be deprecated for worldwide customers.
