Microsoft 365 Troubleshooting is one of the most critical skills for any M365 Support Engineer or Administrator.
In real enterprise environments, issues rarely follow textbook examples — they involve mail flow, identity, conditional access, security, licensing, and hybrid configurations.
This guide covers real interview-level and production-level troubleshooting scenarios every M365 admin should Know.
Table of Contents
Microsoft 365 Troubleshooting: Core User Issues
1. Users are unable to receive external emails but internal emails work. How do you troubleshoot?
I first verify MX records and ensure they point to Exchange Online. Then I run a message trace to confirm whether emails are reaching EOP. I check anti-spam policies, quarantine, and transport rules that might block external email/sender. I also validate connectors and SPF/DKIM/DMARC configuration. Finally, I will test email flow by sending email on external domains like Gmail.
2. A user’s mailbox is not syncing in Outlook but works in OWA. What will you check?
Since OWA works, Exchange is healthy. I check Outlook profile corruption, OST issues, and cached mode. I verify Autodiscover using exchange connectivity analyzer tool Modern Authentication, and clear Credential Manager. If needed, I recreate the Outlook profile.
3. How do you troubleshoot mail delay issues in Exchange Online?
I use message trace to check timestamps and identify where delay occurs. I check connectors, mail queue, large attachments, throttling, and external relay latency. I also review service health for incidents.
4. Users report Teams status showing “Out of Office” incorrectly. What could be the reason?
Teams reads presence from the Exchange mailbox calendar. Usually it’s due to Outlook Automatic Replies or stale calendar entries. I verify OOF settings in OWA and clear them if needed. Restarting Teams often helps.
5. SharePoint site is slow to load for users. How do you diagnose?
I check page size, large files, and excessive web parts. I review network latency . I also check Microsoft 365 Service Health and test from different locations or different network.
6. OneDrive is not syncing for a user. What steps will you take?
I check client version, storage quota, file path limits, and file conflicts. I run OneDrive reset and re-login. If needed, I unlink and relink the account. Also i will check whether user is able to access OneDrive online or not. this will confirm whether user Onedrive is Locked or unlocked.
7. How do you troubleshoot Hybrid mail flow issues?
I validate connectors, TLS certificates, firewall rules, and HCW configuration. I run message trace on both sides and confirm accepted domains and routing.
8. A user is not getting MFA prompts. What could be wrong?
Possible reasons include Conditional Access exclusions, trusted locations bypass, remembered MFA sessions, or MFA disabled for the user. I check CA policies and sign-in logs. We can check whether any MFA policy is getting applied on user ID or not using sign-in logs and what if option present on conditonal access page in entra. What IF option list down all constional access policy is applyin on user while accesing particular portal.
9. Emails are going to Junk for multiple users. How do you fix?
I review anti-spam policies, safe sender lists, and tenant allow/block lists. I also verify SPF, DKIM, and DMARC to improve reputation. check IP reputation of sender.
10. A shared mailbox is not visible in Outlook automatically. Why?
Auto-mapping requires Full Access permission. If added via PowerShell with automapping disabled, it won’t appear. Also, replication delay can occur.
11. User deleted emails and wants recovery after 30 days. Is it possible?
Only if Litigation Hold, retention policy, or backup exists. Otherwise, after retention expiry, recovery isn’t possible.
12. How do you troubleshoot license assignment issue where app still not accessible?
I check license propagation delay, service plan enablement, and user usage location. Sign-out/sign-in often resolves it.
13. Teams meeting add-in missing in Outlook. What will you do?
I check COM add-ins, reinstall Teams, repair Office, and verify registry keys. Also ensure Teams desktop app is installed.
14. How do you identify which transport rule is affecting mail flow?
Message trace shows which rule was applied. I also review rule priority and test rules in audit mode.
15. User cannot access a SharePoint file but others can.
I verify permissions, inheritance, and sharing links. I also check Conditional Access policies.
16. Mailbox showing full even after deleting emails.
Likely Recoverable Items folder is full or Litigation Hold is enabled. Enabling archive helps.
17. How to troubleshoot “550 5.7.1 Relaying denied” error?
Usually caused by unauthenticated relay. I check connectors, SMTP auth, and SPF records.
18. What logs/tools do you use regularly for troubleshooting M365?
Message Trace, Azure AD sign-in logs, Unified Audit Log, Service Health, and Defender portal.
19. A user’s account keeps getting locked. How do you find the source?
I review sign-in logs to identify source IP/device. Often due to cached credentials on devices or legacy apps. Also i will check event logs on AD server from where user authentication is hapening this will give more details information for account lock issue.
20. How do you handle a compromised M365 account?
Immediate password reset, revoke sessions, enable MFA, check audit logs, and remove suspicious mailbox rules.
How To Respond To A Compromised Microsoft 365 Account (Admin Guide)
Scenario Based Questions
Scenario 1: CEO is not receiving important external emails
Priority message trace, safe sender list, spam filtering, and mailbox rules check.
Scenario 2: User can access OWA but Outlook keeps asking for password
Clear credentials, enable Modern Auth, recreate profile.
Scenario 3: Emails from your domain going to recipient junk/spam
Fix SPF, DKIM, DMARC and domain IP reputation.
Scenario 4: After password reset, account still getting locked
Old credentials on devices or active sessions causing lock.
Scenario 5: Shared mailbox not updating for users
Cached Outlook issue or permission delay.
Scenario 6: OneDrive sync stuck on “Processing changes”
Reset OneDrive and check conflicts.
Scenario 7: Mail flow stopped between on-prem and Exchange Online (Hybrid)
Check connectors, HCW config, TLS certificate.
Scenario 8: Suspicious activity from a user account at midnight
Review sign-in logs, block sign-in, force reset, enable CA, revok season from Entra portal.
Scenario 9: Distribution group not receiving emails
Check who can send email on DL and wether email sending is allowed or not on DL, membership, and hidden-from-GAL setting.
Scenario 10: License assigned but user cannot use Teams/OneDrive
Propagation delay or disabled service plan.
Scenario 11: A user left the company. Manager needs access to mailbox. What will you do?
Convert to shared mailbox, assign access, apply retention.
Scenario 12: Users are getting too many phishing emails. How will you control this?
Enable anti-phishing, Safe Links, Safe Attachments, and user awareness.
How to Investigate Phishing Attacks in Microsoft 365 – Admin Playbook
Scenario 14: Login attempt from outside India detected. How will you block it?
Conditional Access with named locations and geo-blocking.
Scenario 15: How will you implement email disclaimer for all outgoing emails?
Create Exchange transport rule with disclaimer text and fallback option.
Final Thoughts
Mastering Microsoft 365 Troubleshooting means understanding how identity, security, and mail flow connect together.
Admins who develop strong troubleshooting skills become highly valuable and high-paid professionals in the M365 ecosystem.
