Skip to content

Scan-to-email broken since Microsoft disabled basic auth

Microsoft 365 is phasing out SMTP AUTH. Printers used to send to smtp.office365.com with username + password, that path is closing or already closed.

Try this first

  1. 1Confirm it is SMTP AUTH. Check the printer panel or logs for a 535 5.7.139 error. If so, basic auth is off for that account.
  2. 2Option 1 (fastest): Microsoft 365 high-volume email or Direct Send. The printer sends from a fixed IP to tenantname.mail.protection.outlook.com, no auth needed. Internal recipients only.
  3. 3Option 2 (cleanest): SMTP relay via SendGrid, Mailgun, or an ISP relay. Own credentials, own DNS records (SPF, DKIM, DMARC), works to any recipient.
  4. 4Option 3 (temporary): re-enable SMTP AUTH per-mailbox via PowerShell on a service account, strong password and MFA exclusion. Supported until Microsoft pulls the plug, not a long-term plan.
  5. 5Always update your SPF record when changing send method. Otherwise mail goes to spam and the printer takes the blame.

When to bring us in

Got 5 or more MFPs: do it once with a central relay. We set up Mailgun or SendGrid with your own domain, adjust DNS. Half-day one-off.

See also

None of the above fits?

Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.

Who are you?

For the AI question we need your email and company, so we can follow up if the AI gets stuck, and to prevent abuse.

Limited to 2 questions per hour and 5 per day, kept lean so the AI stays useful. For more, contacting us directly works better for you and us.

Or skip the DIY entirely

Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.