Safe Senders list not saving + “Try removing some senders” error in Exchange Online

Hi @Joshua Gogol, 

Thank you for reaching out and for sharing an error message that was reported by your users.  

I can totally understand the inconvenience of not being able to add domains or addresses to safe senders list. According your concern, the error message typically happens when user mailbox safe senders list is at its limit, which can also cause new entries not to save consistently. 

To resolve the issue, I recommend trying these steps: 

1. Remove older or duplicate Safe Senders entries  

• Remove old or duplicate entries 
• Add domains (company.com) instead of individual addresses (******@company.com) where possible 

This aligns with the error message itself, which suggests removing some senders. It also avoids the scalability problem called out for Safe Senders. 

2. Reset the mailbox junk email trusted lists 

If removing and adding the addresses doesn’t resolve the issue, I recommend reseting mailbox safe senders and blocked senders list using the Exchange PowerShell module. 

To do this, please follow these steps: 

• Export the current lists: 

$u = "******@company.com["](mailto:******@contoso.com"mailto:******@contoso.com") 
$c = Get-MailboxJunkEmailConfiguration -Identity $u 
$c.TrustedSendersAndDomains    | Out-File ".${u}_TrustedSenders.txt" 
$c.TrustedRecipientsAndDomains | Out-File ".${u}_TrustedRecipients.txt" 
$c.BlockedSendersAndDomains    | Out-File ".${u}_BlockedSenders.txt" 

• Clear the lists: 

Set-MailboxJunkEmailConfiguration -Identity $u ` 
 -TrustedSendersAndDomains $null ` 
 -TrustedRecipientsAndDomains $null ` 
 -BlockedSendersAndDomains $null 

• Re-add only the minimum needed domains: 

Set-MailboxJunkEmailConfiguration -Identity $u ` 
-TrustedSendersAndDomains @{Add="company.com"} 

I hope this information is helpful. Please follow the steps above and let me know if it works for you. If not, we can continue working together to resolve the issue.   

Thank you for your patience and understanding. If you have any questions or need additional assistance, please don’t hesitate to reach out so I can continue to support you. If you found the response useful, please consider marking it as accepted, as this may help other community members who are looking for similar guidance.   

I look forward to continuing the conversation.

If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.     

This behavior is consistent with the per‑mailbox limits on the junk email “safelist collection” (Safe senders, Safe recipients, and Blocked senders) in Exchange Online.

Key points from the context:

• The Safe senders/Safe recipients/Blocked senders lists together form the safelist collection on the mailbox and are stored/configured at the mailbox level in Exchange Online, not just in the Outlook client.
• Admins can view and manage these lists with Set-MailboxJunkEmailConfiguration in Exchange Online PowerShell, using parameters such as TrustedSendersAndDomains (Safe senders) and BlockedSendersAndDomains (Blocked senders).
• For Exchange Online mailboxes, server‑side junk mail policies and limits take precedence; client changes might not be honored if they exceed limits or conflict with policy.

What is happening

1. Users have accumulated a large number of entries in Safe senders/Safe recipients/Blocked senders over time.
2. The mailbox’s safelist collection has reached its size/entry limit.
3. When users try to add more entries in Outlook on the web or Outlook, Exchange Online rejects the change and surfaces the generic error: “Can’t add to Safe senders… Try removing some senders and then adding the address again.”
4. Because the server rejects the update, the new entries are not persisted, so users feel they must re‑add the same addresses repeatedly.

How to fix and validate (admin steps)

1. Review the current safelist collection for an affected user with Exchange Online PowerShell using Get-MailboxJunkEmailConfiguration and inspect:
   • TrustedSendersAndDomains (Safe senders)
   • BlockedSendersAndDomains (Blocked senders)
   • ContactsTrusted / TrustedListsOnly if in use
2. Reduce the size of the lists:
   • Remove obsolete or redundant domains and addresses from TrustedSendersAndDomains and BlockedSendersAndDomains using Set-MailboxJunkEmailConfiguration.
   • Prefer domain‑level entries (for example, contoso.com) instead of many individual addresses from the same domain, to keep the list small.
3. Have the user try again in Outlook on the web:
   • In Outlook on the web, go to Settings > Mail > Block or allow.
   • Under Safe senders and recipients, add the required sender or domain again and save.
   • With enough entries removed server‑side, the new entry should now save successfully and persist.
4. Check for server‑side filtering behavior:
   • Even with Safe senders configured, Exchange Online policies (for example, policies that quarantine instead of “Move to Junk Email”) can override domain‑level Safe sender entries. In those cases, only specific email addresses (not whole domains) are honored for bypassing quarantine.
   • If messages are still going to Junk or quarantine despite being on Safe senders, review the anti‑spam/anti‑phishing policy actions and adjust as needed.

User‑side guidance

For end users, the practical guidance is:

• Remove older or unneeded entries from Safe senders and recipients and Blocked senders and domains in Outlook on the web under Block or allow, then add the new sender/domain again.
• Use domain entries instead of many individual addresses where appropriate.
• If the problem persists for multiple users, escalate to an Exchange Online admin to clean up and manage the safelist collection via PowerShell.

References:

• Configure junk email settings on Exchange Online mailboxes
• Block or allow (junk email settings)
• Options > Junk Email
• Block or unblock senders in Outlook
• Block a mail sender in Outlook
• Block a mail sender