Daily report of quarantined e-mails in Exchange 2007

Posted on 2010-09-22
Last Modified: 2012-05-10
Hi, in our office we have a quarantine mailbox where all of our non-rejected spam goes.  Naturally, once in awhile it picks up message that are not spam.

Rather than having everyone check this spam inbox, I was thinking it would be really cool to automate this so that everyone would get a report each day of the messages that were sent to them and quarantined on the previous day.

So basically I'm guessing it would be a powershell script that queries the spam inbox, by date and To: field, and then sends an email to that person, listing the From: field and message subject.

What is the best way to do this?
Question by:jamorlando
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 3

Expert Comment

ID: 33735391
dont think its possible to use powershell to get the list of emails in a mailbox. but saying that i found the following to get the list of flagged emails

Author Comment

ID: 33735759
I tested this script on my computer and it worked.

So basically, I would need to set up a new machine with Outlook installed and have the default inbox be our spam inbox.  Then I would schedule a nightly powershell script to run.

Before I go further, is this the best way to do this?  Is there free software out there that already handles this?

Expert Comment

ID: 33735784
Not that i know of. but can always suggest the best teacher. :)
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.


Author Comment

ID: 33735802
Never heard of it.  I use (kidding)

Expert Comment

ID: 33735829
never heard of that as well.. ;). heard something about someone having a some sort of a search engine called 'ding'.. ;)
LVL 12

Expert Comment

ID: 33743490
I did something similar years ago, with the help of Sue Mosher, using a server side VB script that hit a Public Folder to generate a daily email containing all new messages of the day. I will see if I can find it and convert it to work with a mailbox. No promises, this is from the Exchange 2000 days and much has changed, but it stands to reason that it should still be possible.

Author Comment

ID: 33876280
Gus, were you ever able to find that script?

Author Comment

ID: 33884236
I set up a PC with Outlook installed with the Spam inbox.  Opened up a new thread in the Outlook forum.

Author Comment

ID: 33908165
First step ... I am able to export email folders from a date range to a PST file.

Export-Mailbox -Identity SPAM -IncludeFolders '\Inbox\Joe' -StartDate "10/13/2010" -EndDate "10/13/2010" -PSTFolderPath 'C:\Joe Yesterday Spam.pst'

Anyone know how to convert this to a .csv or .txt file so that I can parse it with a script?

Accepted Solution

jamorlando earned 0 total points
ID: 33948252

Author Comment

ID: 33983802
Actually ... I adandoned PSTViewerPro, because it's buggy.
I buckled down and forced myself to write some powershell.
Here's my script.  (To have this work you need to have message rules set up that puts people's quarantined spam into a subfolder with the inbox)

#Script by Jamie Orlando
#Last updated: 10/25/2010
#Recurses through subfolders in Inbox and e-mails each user the headers from their spam messages on the previous day
#***   Make sure the following command is entered into PowerShell before proceeding:
#***   Set-ExecutionPolicy RemoteSigned

$olFolderInbox = 6
$ol = new-object -comobject "Outlook.Application"
$mapi = $ol.getnamespace("mapi")
$inbox = $mapi.GetDefaultFolder($olFolderInbox)
$inboxFolders = $inbox.Folders | Select Name
$yesterdayDate = (Get-Date).AddDays(-1).toShortDateString()

foreach ($CurrentFolder in $inboxFolders)
   $CurrentRecipient = $CurrentFolder.Name  

   $msgs = $inbox.Folders.Item("$CurrentRecipient")
   $countSpam = 0
   foreach ($CurrentMsg in ($msgs.items | Sort-Object CreationTime))
      $CurrentMessageDate = $CurrentMsg.CreationTime.toShortDateString()

      if($CurrentMessageDate -eq $yesterdayDate)
         $CurrentMsg.Body | Out-File -Filepath C:\spambody.txt
         "Time: " + $CurrentMsg.CreationTime.toShortTimeString() | Out-File "C:\spamreport.txt" -Append
         $EmailFrom = select-string -pattern "From: " C:\spambody.txt | Select-Object Line | Select -First 1
         $EmailFrom.Line | Out-File "C:\spamreport.txt" -Append
         $EmailSubject = select-string -pattern "Subject: " C:\spambody.txt | Select-Object Line | Select -First 1
         $EmailSubject.Line | Out-File "C:\spamreport.txt" -Append
         "" | Out-File "C:\spamreport.txt" -Append
         remove-item "c:\spambody.txt"

   if($countSpam -ge 1)
      $SendingServer = ""
      $FromAddress = ""
      $ToAddress = $CurrentRecipient + ""
      $MessageSubject = $countSpam + " message(s) were quarantined on: " + $yesterdayDate
      $SpamOutput = Get-Content "c:\spamreport.txt" | Out-String

      $MessageBody = @"
On $yesterdayDate, $countSpam spam messages were quarantined for $CurrentRecipient.
If any of these messages are not spam, please e-mail to retrieve the message.
Thank you,
IT Staff

      $SMTPMessage = New-Object System.Net.Mail.MailMessage $FromAddress, $ToAddress, $MessageSubject, $MessageBody
      $SMTPClient = New-Object System.Net.Mail.SMTPClient $SendingServer

      remove-item "c:\spamreport.txt"

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In-place Upgrading Dirsync to Azure AD Connect
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
how to add IIS SMTP to handle application/Scanner relays into office 365.

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question