Link to home
Create AccountLog in
Avatar of canuseeit

asked on

How can I find out why an email was delayed in Exchange 2010

We had some very important emails that were time sensitive sent out yesterday, 4 in all. the one we set out at about 5pm somehow sat in Exchange until 100 am this morning. Message tracking shows:

Delivery Report for  email

5/15/2013 5:14 PM
The message was submitted to

5/16/2013 11:04 AM
The message was successfully handed off to a different e-mail system. This is as far as we can track it.

Not sure if I'm using Message Tracking right, but all the steps show a time stamp of 2013/05/15 17:14:10

Is there a place to look to see why it was delayed? The Execs aren't happy and want answers  I can't give.

Avatar of Manpreet SIngh Khatra
Manpreet SIngh Khatra
Flag of India image

If you can get the Original email from the Recipients system and check the Header of the Email it will tell you exactly where if so the delay happened with TIme zone and everything

- Rancy
Check the application/system logs on the Exchange servers during that time if you believe the delay was on Exchange servers. If you find any errors there then you could work from there to find the root cause.
Avatar of mouseware

You'll need to look through your SMTP logs (assuming you have logging enabled) and find that message. You should see the reason for the delay or failure. It could have been submitted on time, but there were failures out of your organization's control that prevented the message from reaching the recipient. Basicly you are looking for SMTP errors from 5PM to 11AM the following day for that message ID or recipient which indicate why it took so long to send. YOu may find something like recipient's server not responding/timeout/busy/etc.
Avatar of canuseeit


The issue was it was an PR annoucment to our customers, so it was a long list of 200 contacts all in the bcc. The first 3 were only to about 50 email addresses and all went without a hitch. The last one we sent got delayed.

I am checking the logs now, I will report back to see if there is something there I don't understand.

For Rancy, I'm not going to post the entire thing, but here is the part from when I sent it, and the next part that is 18 hours later

Received: from ( by
 ( with Microsoft SMTP Server id; Thu, 16 May 2013
 18:06:15 +0000
Received: from ([::1]) by ([::1]) with
 mapi id 14.01.0421.002; Wed, 15 May 2013 17:14:10 -0700
unfortunetly I am stupid andout logging is only goes back to yesterday at 10:48pm... sigh
Uhhh :( Just wondering if there is a way out to find a root cause without logs. Have you checked that on all servers involved?
Received: from ([::1]) by ([::1]) with
 mapi id 14.01.0421.002; Wed, 15 May 2013 17:14:10 -0700

Are both servers in Question the same or different ones ?

- Rancy
Avatar of Jeffery Hayes
Jeffery Hayes
Flag of United States of America image

Link to home
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Correct we use Forefront protection. That is where the item got stuck, even though I have forefront turned OFF for outgoing mail. There is nothing except a delay leaving there. there is no other error, so I opened a ticket with Microsoft on this.