Solved

Some help on Exchange 2007 and message tracking

Posted on 2013-05-31
3
174 Views
Last Modified: 2013-07-10
I had a user that reported she "didn't send" a particular email.  I can confirm it isn't in her sent email folder.  When I did the tracking on it, I found the email in the logs, and it shows all the same information as the email in question.  My question is how do I actually read the body of it and the attachment, not just the statistical information?
0
Comment
Question by:tsaico
  • 2
3 Comments
 
LVL 4

Expert Comment

by:Jeffery Hayes
ID: 39211497
Look at the message header for the mailbox the message was revived in.

In message tracking the only real thing you might notice is the IP address.

However if you look at the message header you can quickly see were the message was sent from along with who actually sent the message.

If possible can you provide the message header as I'll happy review it and let you know what I think occurred.

So far what it sounds like happen is that the message might have been spoofed which is really common.

As your want to look at both the following values..

Return-Path:
From:

Most times with spoofing one of these values won't be the same.
0
 
LVL 9

Accepted Solution

by:
tsaico earned 0 total points
ID: 39302806
I had turned on journaling for that specific user.  It turned out she had written a rule to auto send emails when a certain condition applied, but didn't finish writing the rule, thinking it was a "draft" kind of thing that wouldn't be in effect.
0
 
LVL 9

Author Closing Comment

by:tsaico
ID: 39313559
While good advice, turned out it was a rule that was forwarding the email, and a other that was autodelting when she sends emails to herself.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out what you should include to make the best professional email signature for your organization.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question