Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 557
  • Last Modified:

Incorrect Sender

I have an issue where a user connected to his corporate mailbox via a MacBook using OWA (I don't have any version details).  He composed a message with three recipients.  The message was successfully RECEIVED by all the recipients, but the SENDER was someone else - i.e. another valid user account in the company was listed as the sender.  Message tracking from the person composing the message does not list the message in Sent Items.  The message does show up in the Sent Items folder of the second account (i.e. the account that shows up as the sender in the recipient's mailboxes).  Neither of the two "sending" mailboxes have full access or send as permissions for anyone other than typical server/service accounts and administrators.  I've never seen this issue before.
0
woolpertts
Asked:
woolpertts
  • 4
1 Solution
 
woolperttsAuthor Commented:
Exchange 2010 w/SP1, Outlook 2010, standard OWA config.
0
 
PhateonCommented:
Please see if this solves your problem - Exchange Server 2010 removes the sender's email address from the recipient list in a redirected email message - http://support.microsoft.com/kb/983549

This should be fixed in MS Exchange SP2.
0
 
woolperttsAuthor Commented:
Phateon,

Thanks for the response.  Unfortunately the issue listed in the article doesn't apply here.  The user doesn't have any rules configured on his mailbox or locally in Outlook.  They were accessing their mailbox via OWA, which in and of itself isn't unusual.  Accessing OWA via a MacBook shouldn't be an issue either, although the MacBook was a personal system being used "publicly" from home.  The message was composed from one mailbox but actually sent from another (confirmed via message tracking).  I simply don't understand how Exchange could "fail" and send the message from another mailbox - unless the system has been compromised (but the two example messages are the only known instances) OR the MacBook has been compromised.

Again, there are no event log errors on the server or reported errors from the message composer, sender, or recipients.  I realize this is vague at best, but any insight is appreciated.
0
 
woolperttsAuthor Commented:
The end-user has not used his MacBook to connect to OWA again and there have been no further reported incidents.
0
 
woolperttsAuthor Commented:
This issue was so vague and the environment gave so little detail as to a possible cause.  Very difficult to ask anyone to troubleshoot but appreciate the info suggested.
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now