Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Some help on Exchange 2007 and message tracking

Posted on 2013-05-31
3
Medium Priority
?
178 Views
Last Modified: 2013-07-10
I had a user that reported she "didn't send" a particular email.  I can confirm it isn't in her sent email folder.  When I did the tracking on it, I found the email in the logs, and it shows all the same information as the email in question.  My question is how do I actually read the body of it and the attachment, not just the statistical information?
0
Comment
Question by:tsaico
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 4

Expert Comment

by:Jeffery Hayes
ID: 39211497
Look at the message header for the mailbox the message was revived in.

In message tracking the only real thing you might notice is the IP address.

However if you look at the message header you can quickly see were the message was sent from along with who actually sent the message.

If possible can you provide the message header as I'll happy review it and let you know what I think occurred.

So far what it sounds like happen is that the message might have been spoofed which is really common.

As your want to look at both the following values..

Return-Path:
From:

Most times with spoofing one of these values won't be the same.
0
 
LVL 9

Accepted Solution

by:
tsaico earned 0 total points
ID: 39302806
I had turned on journaling for that specific user.  It turned out she had written a rule to auto send emails when a certain condition applied, but didn't finish writing the rule, thinking it was a "draft" kind of thing that wouldn't be in effect.
0
 
LVL 9

Author Closing Comment

by:tsaico
ID: 39313559
While good advice, turned out it was a rule that was forwarding the email, and a other that was autodelting when she sends emails to herself.
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
Suggested Courses

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question