Solved

Usage Report states Administrator sent over 9,000 messages

Posted on 2006-11-30
4
261 Views
Last Modified: 2010-04-19
I have followed all steps for preventing relay but I'm still getting a reprot that the Administrator account has sent 9,869 external emails over the past two weeks.. So, does this mean someone has the admin password? What is exactly going on here?.....

Any help is truly appreciated!

bruce
0
Comment
Question by:bmilne1957
4 Comments
 
LVL 9

Accepted Solution

by:
DanKoster earned 250 total points
ID: 18051564
If you have the option to allow authenticated users to relay, then there's a good chance that's what happened.  I've had several new clients that learned the hard way about this as their server was at a snail's pace.  That's why I turn off the relay all together, or only allow it for specific user names (in rare circumstances where its needed).
0
 
LVL 6

Expert Comment

by:manicsquirrel
ID: 18051705
Could it possibly be non-delivery reports.  In other words, the server is responding to incoming spam for invalid mailboxes.
0
 

Author Comment

by:bmilne1957
ID: 18055177
Hmmm, I see what you mean though I had followed all of MS guides - I disabled the Administrator email account last night and the emails stopped, I'll go back to status quo and see how it goes. I'm the only one that does any relaying and I have allowed myself to do so as another user.

Thanks!

Bruce
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 18061018
If it's Non Delivery Reports for invalid mailboxes, then try enabling the Exchange option to end the SMTP connection if the mailbox name is invalid.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now