If your university Outlook email bounces back with Remote Server returned '550 5.7.520 Access denied, Your organization does not allow external forwarding', your university IT administrator has deliberately blocked automatic mail routing at the tenant level.
Google AI Overviews and generic tech blogs will tell you to click Settings ➔ Mail ➔ Forwarding ➔ Enable forwarding. That advice is completely useless on a university network. Following it is the exact action that generates the 550 bounce message.
Here is the diagnostic breakdown of why Microsoft 365 blocks your college email forwarding, along with the three working workarounds that bypass this restriction for the 2026/2027 academic year.
Diagnostic Error Lookup
| Error String | Trigger Condition | Tenant Policy Cause | Working Solution |
|---|---|---|---|
| 550 5.7.520 | Outlook Web App auto-forward toggle enabled | Exchange Outbound Anti-Spam policy set to block external forwarding | Use an Inbox "Redirect" rule or Power Automate API flow |
| 550 5.7.708 | Automated rule forwarding to non-edu domain | Tenant outbound sending limit reached for unverified external recipients | Route through Gmail POP3 pull with OAuth2 authentication |
| 550 5.1.8 | Mass automated forwarding from new account | Account flagged by Microsoft Defender as compromised sender | Submit an IT service ticket to clear the blocked sender flag |
Why Universities Block Email Forwarding
Campus IT network policies consistently show that automatic email forwarding is the number one vector for academic phishing and data leaks.
When an attacker compromises a student's login credentials through a campus phishing scam, their first automated action is to set up an invisible forwarding rule to an external Gmail or ProtonMail address. This allows the attacker to intercept password resets, campus administration notices, and two-factor codes without the student noticing.
To prevent this, university Microsoft 365 tenants enforce an Exchange Online rule:
Set-HostedOutboundSpamFilterPolicy -Identity "Default" -AutoForwardingMode Off
This command globally kills the standard "Forwarding" switch inside your student Outlook settings. Every message forwarded to an external email domain is intercepted by Microsoft's mail exchange servers and rejected with the 550 5.7.520 NDR (Non-Delivery Report).
Method 1: The Inbox "Redirect To" Rule (The Quickest Bypass)
Microsoft Exchange treats an auto-forward differently from an inbox redirect.
A standard forward takes the message and re-sends it from your .edu address to your Gmail, which trips the outbound anti-spam filter. A redirect passes the message directly to your personal address while keeping the original sender's name and email in the From: header.
Many university IT policies block the account-level forwarding toggle but leave rule-based redirects active for specific inbox filters.
Step-by-Step Setup in Outlook Web:
- Open your college email in a desktop browser at
outlook.office.com. - Click the Settings gear icon in the top right corner.
- Navigate to:
Mail ➔ Rules ➔ Add new rule
- Name your rule:
Forward to Personal Gmail. - Under Add a condition, select:
Apply to all messages
(Tip: If you only want class updates, select Condition ➔ Subject or body includes ➔ [e.g., Canvas, Blackboard, Grade]).
6. Under Add an action, do NOT choose "Forward to". Instead, choose:
Redirect to
- Type your personal Gmail address and press Enter.
- Check the box labeled Stop processing more rules.
- Click Save.
Send a test email to your college address from a friend's phone. If your university's tenant allows rule-based redirects, the message will appear in your personal Gmail within 60 seconds with the original sender intact.
Method 2: The Power Automate API Flow (Bypasses Tenant SMTP Blocks)
If Method 1 still bounces with Error 550, your university has blocked rule-based redirects in Exchange.
The next solution is Microsoft Power Automate. Because Power Automate is an approved cloud service inside your university's Microsoft 365 student package, it uses internal Graph API calls instead of external SMTP forwarding. The Exchange server does not flag it as an unauthorized relay.
Step-by-Step Power Automate Setup:
- Log into your student portal and open Power Automate (
make.powerautomate.com) using your college credentials. - In the left navigation bar, click:
Create ➔ Automated cloud flow
- Name the flow:
College Email to Gmail Mirror. - In the trigger search bar, type
Office 365 Outlookand select:
When a new email arrives (V3)
- Click Create.
- In the trigger card:
- Folder: Select
Inbox. - Include Attachments: Select
Yes(if you want homework PDFs forwarded).
- Folder: Select
- Click + New step below the card.
- In the action search bar, type
Send an email (V2)under Office 365 Outlook. - Fill out the fields:
- To: Your personal Gmail address.
- Subject: Click the box and select dynamic content
[Subject]. - Body: Click the box and select dynamic content
[Body]. - Importance: Select
[Importance].
- Click Save in the top bar.
- Click Test ➔ Manually ➔ Test, then send an email to your university address.
Because this flow runs inside the tenant as an authenticated API operation, it bypasses the Exchange Outbound Anti-Spam filter entirely.
Method 3: Gmail POP3 / IMAP Fetch (Client-Side Pull)
When campus IT blocks all outgoing server-side rules, the only permanent solution is to make Gmail pull the emails from the outside, rather than asking Outlook to push them out.
With this method, Google's servers log into your university mailbox directly once every few minutes and pull new messages into your Gmail inbox.
Important Prerequisites:
- Your university must allow POP3 or IMAP access in Outlook settings (
Settings ➔ Mail ➔ Sync email). - If your school mandates two-factor authentication (Duo Mobile or Microsoft Authenticator), you must generate an App Password from your university account security page.
Step-by-Step Setup in Gmail:
- Open Gmail on your computer.
- Click the Gear icon in the top right corner ➔ See all settings.
- Select the Accounts and Import tab.
- Scroll down to Check mail from other accounts and click:
Add a mail account
- Enter your full university
.eduemail address and click Next. - Select Import emails from my other account (POP3) and click Next.
- Enter your connection settings:
- Username: Your full
.eduemail address or university network ID. - Password: Your university password (or generated App Password).
- POP Server:
outlook.office365.com - Port:
995 - Check: Always use a secure connection (SSL) when retrieving mail.
- Check: Label incoming messages (e.g., with your university name so they stay organized).
- Username: Your full
- Click Add Account.
Gmail will now automatically check your college Outlook inbox every 15 to 30 minutes and pull incoming messages straight into your main feed.
Prevention: How to Avoid Having Your Account Flagged
When setting up automated email forwarding on university infrastructure, keep these guidelines in mind:
- Do not forward spam: Ensure your redirect rules only forward emails that arrive in your main Inbox, never your Junk Email folder. Forwarding spam messages to Gmail will cause Google to flag your college account as an infected mail source.
- Never daisy-chain accounts: Do not forward Outlook to Gmail, and then configure Gmail to forward back to Outlook. This creates a mail loop that can generate thousands of bounce messages in minutes, resulting in an automatic account lock by university IT.
- Respect campus FERPA and Acceptable Use Policies: Forwarding emails containing sensitive student records, academic transcripts, or research data to personal unencrypted webmail can violate university data governance policies.
In Short
Do not waste time toggling the default forwarding switch in Outlook Web App. Use an inbox redirect rule to bypass basic filtering, switch to a Power Automate flow if your campus blocks redirects, or configure a Gmail POP3 pull to bypass server-side restrictions altogether.
Note: This guide provides independent educational technical guidance. Always verify your campus Acceptable Use Policy and student data governance rules with your university IT service desk.