Skip to content
Microsoft (Outlook.com and Microsoft 365) · permanent error

550 5.0.350 [AS345]: attachment with too many embedded files

The message was rejected because an attachment contains 20 or more embedded files, which is treated as a policy violation.

Microsoft
Provider
Permanent (5xx)
Class
Sources checked
Author

At a glance

Code
550 5.0.350 [AS345]
Temporary or permanent
PermanentRefused for good: the message comes back to the sender, and resending it gets the same answer.
Who has to act
The sender. The fix is on the sending side: your domain, your server or your list.
What the server says
550 5.0.350 Requested action not taken: policy violation detected (AS345)

What it means

Microsoft documents this variant of 550 5.0.350 for nested content: an attachment, such as a Word document, with 20 or more files embedded in it, such as other Word or Excel files. The message is flagged as a policy violation, with the reference AS345, and refused as a whole. Nothing is wrong with the addresses or the sender's reputation; the message goes through once the attachment carries fewer embedded files.

Common causes

  • A document attached to the message embeds 20 or more other files.
  • Files were inserted into the document as embedded objects rather than attached separately.

How to fix it

  1. 01Remove some of the embedded files from the attached document and send it again.
  2. 02Attach the files separately, or share them through a link instead.
  3. 03If the error persists with fewer embedded files, forward the report to your admin.

Sources

What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.

  1. 550 5.0.350Generic error from the recipient's system.Exchange Online wraps an unspecific rejection from the recipient's mail system in 5.0.350; the real reason is in the original reply quoted in the report.MicrosoftPermanent

Further reading

All 111 Microsoft codesEvery code in the wikiPaste your own bounce

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 33 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 33

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer