Commands › Exchange Online

Remove-TenantAllowBlockListSpoofItems

Exchange Online ExchangeOnlineManagement Remove-*

Remove spoofed sender entries from the Tenant Allow/Block List.

Quick start script

# Remove-TenantAllowBlockListSpoofItems — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-TenantAllowBlockListSpoofItems
$before | Format-List

# 3. Make the change (dry run first)
Remove-TenantAllowBlockListSpoofItems -Identity <HostedConnectionFilterPolicyIdParameter> -Ids <String[]> -WhatIf
Remove-TenantAllowBlockListSpoofItems -Identity <HostedConnectionFilterPolicyIdParameter> -Ids <String[]>

# 4. Verify and diff
$after = Get-TenantAllowBlockListSpoofItems
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

Remove-TenantAllowBlockListSpoofItems [-Identity] <HostedConnectionFilterPolicyIdParameter> -Ids <String[]>
 [-Confirm]
 [-WhatIf]
 [<CommonParameters>]

Parameters (4)

Parameter	Type	Required	What it controls
-Identity	HostedConnectionFilterPolicyIdParameter	yes	Use the value `domain.com\Default` for this parameter. The spoofed sender that you want to remove is really identified by the Ids parameter.
-Ids	String[]	yes	The Ids parameter specifies the spoof pair that you want to remove. A valid value for this parameter is the Identity property value from the output of the Get-TenantAllowBlockListSpoofItems cmdlet. You can specify...
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-WhatIf	SwitchParameter		This parameter is reserved for internal Microsoft use.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.