Commands › Exchange Online

New-TenantAllowBlockListSpoofItems

Exchange Online ExchangeOnlineManagement New-*

Create spoofed sender entries in the Tenant Allow/Block List.

Quick start script

# New-TenantAllowBlockListSpoofItems — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-TenantAllowBlockListSpoofItems
$before | Format-List

# 3. Make the change (dry run first)
New-TenantAllowBlockListSpoofItems -Identity <HostedConnectionFilterPolicyIdParameter> -SendingInfrastructure <String> -SpoofedUser <String> -WhatIf
New-TenantAllowBlockListSpoofItems -Identity <HostedConnectionFilterPolicyIdParameter> -SendingInfrastructure <String> -SpoofedUser <String>

# 4. Verify and diff
$after = Get-TenantAllowBlockListSpoofItems
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

New-TenantAllowBlockListSpoofItems [-Identity] <HostedConnectionFilterPolicyIdParameter> -Action <String> -SendingInfrastructure <String> -SpoofedUser <String> -SpoofType <String>
 [-Confirm]
 [-WhatIf]
 [<CommonParameters>]

Parameters (7)

Parameter	Type	Required	What it controls
-Identity	HostedConnectionFilterPolicyIdParameter	yes	The Identity parameter uses the value Default.
-SendingInfrastructure	String	yes	The SendingInfrastructure parameter specifies the source of the messages sent by the spoofed sender that's defined in the SpoofedUser parameter. Valid values are:
-SpoofedUser	String	yes	The SpoofedUser parameter specifies the email address or domain for the spoofed sender entry.
-SpoofType	String	yes	The SpoofType parameter specifies whether this is an internal or external spoofed sender entry. Valid values are:
-Action	String	yes	The Action parameter specifies whether is an allowed or blocked spoofed sender entry. Valid values are:
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-WhatIf	SwitchParameter		The WhatIf switch doesn't work in Security & Compliance PowerShell.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.