Every now and then my Exchange 2010 CAS server throws up and event 9217. A message is being deferred because two objects in AD have the same SMTP address. I am guessing this was done programatically by ILM. Its only one user. The email address it gives in the log is something like firstname.lastname@example.org. I go to the account of J doe and I see the address but how do I find out what other object has this SMTP address. It could be anywhere. A user, a contact or even a public folder although a PF is unlikely. Its like a needle in a haystack. Can I use powershell to find it? That would be the easiest for me. I don't like messing with LDP.